NAVY CYBERSECURITY WORKFORCE CREDENTIALS MSGID/GENADMIN/CNO WASHINGTON DC/N2N6/SEP:
UNCLASSIFIED//
ROUTINE
R 281336Z OCT 14 PSN 919925H35
FM CNO WASHINGTON DC
TO NAVADMIN
BT
UNCLAS
NAVADMIN 250/14
SUBJ/NAVY CYBERSECURITY WORKFORCE CREDENTIALS
MSGID/GENADMIN/CNO WASHINGTON DC/N2N6/SEP//
REF/A/DOC/DONCIO/28FEB11//
REF/B/DOC/DONCIO/8FEB12//
REF/C/DOC/SECNAVI 1543.2/30NOV12//
REF/D/DOC/SECNAV M-5239.2/MAY2009//
REF/E/DOC/DODD 8570.01/15AUG04//
REF/F/DOC/DODI 8500.01/14MAR14//
NARR/ REF A IS DON CIO MEMO, GUIDANCE FOR CIVILIAN CYBERSECURITY /INFORMATION
ASSURANCE WORKFORCE COMMERCIAL CERTIFICATION COMPLIANCE PROCESS. REF B IS DON
CIO MEMO, GUIDANCE FOR CYBERSECURITY WORKFORCE OPERATING SYSTEM/COMPUTING
ENVIRONMENT CERTIFICATION COMPLIANCE PROCESS. REF C IS SECRETARY OF THE NAVY
INSTRUCTION, CYBERSPACE /INFORMATION TECHNOLOGY WORKFORCE CONTINUOUS
LEARNING. REF D IS DEPARTMENT OF THE NAVY, INFORMATION ASSURANCE (IA)
WORKFORCE MANAGEMENT MANUAL. REF E IS DEPARTMENT OF DEFENSE DIRECTIVE, IA
TRAINING, CERTIFICATION AND WORKFORCE MANAGEMENT. REF F IS DEPARTMENT OF
DEFENSE INSTRUCTION, CYBERSECURITY.
RMKS/1. In accordance with references A, B and C, all Navy Cybersecurity
Workforce (CSWF) personnel (active duty, reserve, civilian, and contractor)
are required to hold valid cybersecurity baseline credentials and complete 40
hours of continuing education units (CEUs) each calendar year. Failure to
complete this annual requirement and maintain the appropriate credential for
a cybersecurity position places the employee at risk for removal from the
CSWF position requiring credentials. Expired commercial certifications are a
demonstration of non-compliance with prescribed DoD and SECNAV policies in
references A through F.
2. Scope and Applicability. This NAVADMIN applies to all designated Navy CSWF
personnel assigned to CSWF positions for six months or more. In accordance
with references C and D, personnel may complete a combination of position
relevant training, education, experiential learning, and commercial
certification activities to fulfill the 40 -hour annual CEU requirement.
Department of the Navy Chief Information Officer (DON CIO) conferences, and
courses via Federal Virtual Training Environment (FedVTE), Skillport, and
Navy Knowledge Online (NKO) are examples of activities that may qualify for
continuing education units. To assist personnel with maintaining valid
commercial certifications, CSWF personnel may continue to request vouchers
from Navy Credentialing Opportunites On-line (COOL) to fund the annual
continuing education and/or maintenance fees.
Navy COOL will not pay for any recertifying activities for an expired
certification. Further information is available at the Navy COOL website
https://www.cool.navy.mil//
3. CSWF personnel who fail to complete the aforementioned requirements are
not qualified to serve in CSWF positions, negatively impact Command
readiness, and weaken the Navy*s overall security posture.
4. Commanders and Command Information Officers are directed to comply with
references C and D for remediation of the stated workforce deficiencies no
later than 31 March 2015.
5. All official requests for a one-time waiver from the above credential
requirements must be addressed to the Department of the Navy Deputy Chief
Information Officer (Navy) (DDCIO(N))and endorsed by a Flag Officer or SES at
the Echelon II level. Waiver request templates can be found at:
https://usff.portal.navy.mil/sites/cyberfor/cswf/default.aspx. Each employee
waiver request must include an Individual Development Plan with significant
milestones that specify the respective training, education, and certification
activities to be completed under the direction of a qualified CSWF
supervisor. All waiver requests are to be submitted no later than 31 December
2014, and shall not extend beyond 31 March 2015. To facilitate tracking, the
Navy Cybersecurity Workforce Management Office (NAVIDFOR N13) will
consolidate all Echelon II CSWF personnel information and list of personnel
requiring a waiver due to failure to hold a valid cybersecurity credential.
CSWF personnel who fail to acquire and maintain cybersecurity credentials in
accordance with the prescribed requirements in the waiver request package
could be subject to personnel actions. DDCIO(N) waiver approvals do not alter
any requirements levied by the baseline credentials certificate granting
authorities.
6. Points of contact are as follows:
Policy - Ms. Brooke Zimmerman (at) (571) 256-8521 or
brooke.zimmerman@navy.mil; Navy Cybersecurity Workforce Management Office
- Mr. Mike Knight (at)(757) 203-3135 or henry.knight@navy.mil;
Training - Mr. Daniel Harrington (at) (757) 203-3307 or
daniel.harrington@navy.mil; Navy Cool - Mr. Keith Boring (at) (850) 452-
6683 or keith.boring @navy.mil.//
7. This NAVADMIN will remain in effect until cancelled or superseded.
8. Released by VADM Ted N. Branch, OPNAV N2N6.//
BT
#1970
NNNN
UNCLASSIFIED//