Enfermero Graduado

DEPARTMENT OF THE ARMY

OFACE OF THE SECRETARY OF THE ARMY
107 ARMY PENTAGON
WASHINGTON DC 20310-0107


Office, Chief loformation Officer I G-6

SAIS-CB

JUL 25 2012

MEMORANDUM FOR SEE DISTRIBUTION SUBJECT: Changes to the Title, Responsibilities and Certification Requirements for Information Assurance Security Officers (lASO) Extension

1.

References: a. Army Regulation25-2, Information Assurance, dated 23 March 2009.

b. Memorandum, CIO/G-6, 7June 2011, Changes to the Title, Responsibilities and Certification Requirements for Information Assurance Security Officers (IASO) 2. This memorandum extends the policy changes directed in reference b to the title, responsibilities and certification requirements, as currently defined in AR 25-2, for the InformationAssurance Security Officer (IASO). 3. The main role of the IASO is to provide Information Assurance oversight, guidance and support to the general user in accordance with the requirements of the Command's Information Assurance program. The IASO must be familiar with IA policy, guidance and training requirements, per AR 25-2, and Best Business Practices (BBP). The IASO is assigned to the lowestInformation Assurance management level, and the number of IASOs will be the quantity necessary to execute effectively the responsibilities documented in this memorandum. 4. Effective 1 July 2011 , the title of "Information Assurance Security Officer" was changed to "Information Assurance Support Officer" (IASO). This modification was intended to reflect the support nature of the position and to eliminatethe perception that it is technical or managerial in nature. Technical and manageriallA support will come from other IA positions that remain unchanged in AR 25-2. . 5. The IASO responsibilities are as follows: a. Verify that all requirements for system access to an Information System are met and that there is a signed Acceptable Use Agreement on file.

SAIS-CB
SUB..IECT: Changes to theTitle, Responsibilities and Certification Requirements for
Information Assurance Security Officer
b. Assist in the preparation, distribution, coordination and maintenance of plans, instructions, policies, guidance and standard operating procedures necessary for implementation of the Command's IA program, and serve as the subject matter focal point for the Command's IA program. c. Ensure that theCommand's or organization's supported users receive initial and annual IA awareness training by verifying completion in the Army Training and Certification Tracking System (ATCTS) or the organization-specific system. The IASO will report non-compliance to the supported Information Assurance Manager (lAM) per established organizational policy and procedures. d. Assist the supported lAM in ensuringthat a Certification and Accreditation package (tactical and garrison) is prepared and maintained in accordance with (lAW) the 000 Information Assurance Certification and Accreditation Process (DIACAP) for any organization that may deploy into a theater of operation while still in garrison. e. Ensure that implementation and veri'fication of compliance with the command's or organization's SOPaddress the reporting of security violations and incidents to the servicing Regional Computer Emergency Response Team (RCERT) lAW Section VIII (incident and intrusion) of AR 25-2. f. In coordination with the supported lAM, ensure that distribution of incident and security violation reports is not limited to the supporting RCERT. Notification must be made in writing to all levels of leadership, asestablished in the command's policy and procedures. g. Tenant IASOs will support and assist the supporting lAM in the development and implementation of the Tennant Support Plans when in a garrison environment. 6. IASO responsibilities are not technical or managerial in nature and no longer justify an IA certification. Therefore, the IA certification requirement for IASOs is eliminated and no...