NATIONAL SECURITY AGENCY - INFOSEC ASSESSMENT METHODOLOGY (IAM)

Specifically designed for FISMA compliance. This two-day instructor-led, full participation course is for experienced Information Systems Security analysts who conduct, or are interested in conducting INFOSEC assessments of information systems. The course teaches the NSA INFOSEC assessment process, a high-level, non-intrusive process for identifying and correcting security weaknesses in information systems and networks.

IAM was originally created by PDD-63 (now Homeland Security Presidental Directive-7) requirement for vulnerability assessments of automated information systems that support the U.S. Infrastructure. In addition to assisting the governmental and private sectors, an important result of supplying baseline standards for INFOSEC assessments is fostering a commitment to improve organizations security posture. The IAM is a prerequistite for the IEM Evaluation course. You can take the IAM and IEM class in the same week (bootcamp style).

Course length 2 days, includes all materials and NSA's IAM certification exam. You earn 16 CPE credits for attending this course which you can use for renewal/continuing education requirement of other certifications.

Target Student: Designed for Auditors, Consultants and Service providers involved in Federal, commercial, and private sector InfoSec. This class teaches the NSA tools, methods, grading scale, and format used to report and manage the security baseline for any organization. Ideal for compliance under Sarbanes-Oxley (SEC), FISMA (FIPS-199), FFIEC (banking), SCADA (utilites), HIPAA (healthcare) and others. This course teaches the NSA INFOSEC assessment process, a high-level, non-intrusive process for identifying and correcting security weaknesses. IEM evaluation class teaches the next phase for evaluating & testing security.

Course Content Individuals will be trained in the IAM so they can use their INFOSEC analysis skills along with the IAM training to provide the standardized IAM assessment service. Currently, companies and government organizations looking for outside help assessing the security posture of their information systems can choose from dozens of commercial firms that advertise INFOSEC assessment capabilities. Although these contractors all provide INFOSEC assessment services, their processes, terminology, scope and costs vary widely. The IAM course was developed for the benefit of organizations trying to obtain an INFOSEC assessment that meets their needs.

• Homeland Security Presidental Directive-7 for requirement for vulnerability assessments of automated information systems that support the U.S. Infrastructure.
• Individuals will be trained in the IAM so they can use their INFOSEC analysis skills along with the IAM training.
• Provide INFOSEC assessment services, their processes, terminology, scope and costs based upon a more standard INFOSEC assessment service which follows the NSA's recommended guidelines
• Since the IAM is a baseline methodology, the final results of the assessment service are highly dependent on the INFOSEC and analytic skills of the assessors.
• Non-technical and non-intrusive skills used to quanitfy, qualify, and improve an organizations security posture.
• Assess security priorities to improve the confidentiality, integrity, and availability of an organizations mission critical information systems.
• Fulfills prerequistite for NSA IEM evaluation course (IEM applies IAM concepts in software evaluation labs)

Course Eligibility Requirements

• U.S. Citizenship Required. (NSA has made some past exceptions for non US Citizens working in the U.S.)
• Five years of demonstrated experience in the field of INFOSEC, COMSEC or computer security, with 2 of the 5 years of experience directly involved in analyzing computer system/network vulnerabilities and security risks
• If you do not meet these requirements, you might still be able to take the course and learn the methodologies in a non-certified capacity. Inquire for details.

Certification Requirements

• Gain qualification approval from NSA (coordinated by Security Horizon)
• Attend all of the two-day class
• Demonstrate an understanding of the IAM through group exercises and class discussions
• Obtain a passing grade (at least 70 percent) on the IAM test.

Course price includes all materials, daily refreshmentsand the certification exam administered in the second day of course. Seating limited to 36 persons.

^$ 995 Open enrollment for the Public

^$ 895 ($100 Discount) to Members of Federal/State government, ASIS, ISSA, Infragard, and ISACA if registered at least 7 working days in advance. Identification or proof of current membership may be required.