↳
1. Securely integrate and apply Department/Agency missions, organization, function, 2. policies, and procedures within the enclave. 3. Ensure that protection and detection capabilities are acquired or developed using the 4. IS security engineering approach and are consistent with DoD Component level IA 5. architecture. 6. Ensure IAT Levels I – III, IAM Levels I and II, and anyone with privileged access 7. performing IA functions receive the necessary initial and sustaining IA training and 8. certification(s) to carry out their IA duties. 9. Prepare or oversee the preparation of IA certification and accreditation 10. documentation. 11. Participate in an IS risk assessment during the C&A process. 12. Ensure information ownership responsibilities are established for each DoD IS and 13. implement a role based access scheme. 14. Analyze, develop, approve, and issue enclave IA policies. 15. Evaluate proposals to determine if proposed security solutions effectively address 16. enclave requirements, as detailed in solicitation documents. 17. Identify IT security program implications of new technologies or technology 18. upgrades. 19. Evaluate cost benefit, economic and risk analysis in decision making process. 20. Interpret and/or approve security requirements relative to the capabilities of new 21. information technologies. 22. Interpret patterns of non compliance to determine their impact on levels of risk and/or 23. overall effectiveness of the enclave’s IA program. 24. Analyze identified security strategies and select the best approach or practice for the 25. enclave. 26. Ensure that security related provisions of the system acquisition documents meet all 27. identified security needs. 28. Evaluate and approve development efforts to ensure that baseline security safeguards 29. are appropriately installed. 30. Evaluate the presence and adequacy of security measures proposed or provided in 31. response to requirements contained in acquisition documents. Less