IAT I-III
IAM I-III
IASAE I-III
CSSP-A, CSSP-IS, CSSP-IR, CSSP-AU and CSSP-SPM
Initial Training*
YesYesYesYes
IA Baseline Certification
Yes
(IA Certification)
(within 6 months)
Yes
(IA Certification)
(within 6 months)
Yes
(IA Certification)
(within 6 months)
Yes
(CSSP Certification)
(within 6 months)
OJT Evaluation
Yes
(for initial position)
NoNoYes
(except CSSP-SPM)
CE Certification
YesNoNoYes
(except CSSP-SPM)
Maintain Certification Status
Yes
(as required by certification)
Yes
(as required by certification)
Yes
(as required by certification)
Yes
(as required by certification)
Continuous Education
Yes
(as required by certification)
Yes
(as required by certification)
Yes
(as required by certification)
Yes
(as required by certification)
Background Investigation
As required by IA level and DoDI 8500.01As required by IA level and DoDI 8500.01As required by IA level and DoDI 8500.01As required by IA level and DoDI 8500.01
Sign Privileged Access Statement
YesN/AN/AYes
(except CSSP-SPM)
Experience
IAT I: Entry level technical position – 0 to 5 or more years of experience in IA technology or a related field.IAM I: Entry level management position – 0 to 5 years of management experience.IASAE I: Entry level IASAE position with 0 or more years of IASAE experience.Recommended years of experience in CSSP technology or a related field:
CSSP-A: at least 2
CSSP-IR: at least 5
CSSP-AU: at least 2
Experience
IAT II: At least 3 years in IA technology or a related area.IAM II: At least 5 years of management experience.IASAE II: At least 5 years of IASAE experience.CSSP-IS: Recommended at least 4 years of experience supporting CSSP and/or network systems and technology.
Experience
IAT III: At least 7 years experience in IA technology or a related area.IAM III: At least 10 years of management experience.IASAE III: At least 10 years of IASAE experience.CSSP-SPM: Recommended at least 4 years of experience in CSSP management or a related field.

*Classroom, distributive, blended, government or commercial provider