The Information Assurance Branch ensures that the Information Assurance (IA) needs of DoDEA and its entities are operating not only within DoDEA requirements and standards, but within the guidelines of the federal government and DoD mandated information assurance and security policies and standards. We accomplished this by conducting those operations that protect and defend information and information systems by ensuring availability, integrity, authentication, confidentiality, and non-repudiation. This includes providing for the mechanisms for secure information systems by incorporating protection, monitoring, analysis, detection, sustainment, and reaction capabilities, while striving to facilitate inter-departmental communication and cooperation, and responsiveness to the diverse needs of all users.

The vision of the Information Assurance (IA) Branch is to provide and integrate emerging state-of-the-art information assurance technologies that protects our information systems, but does not impede our customers' access to the information they need. We strive to provide the required information assurance and configuration management services necessary for the protection of our information systems, balanced against the risks, costs and timeframes.

Goals:

• Protect DoDEA's information and information systems by implementing sound security controls and practices
• Develop effective information security policies, procedures, and practices
• Support the DoD Computer Network Defense, Defense-in-Depth strategy
• Develop, document, and implement an agency-wide information security program
• Consistently provide responsive services to our customers
• Ensure all information systems are certified and accredited
• Comply with the Federal Information Security Management Act (FISMA) of 2002 annual reporting requirements
• Conduct annual vulnerability assessment of DoDEA LAN/WAN networks
• Perform independent evaluation of the agency's information security programs and practices
• Conduct risk assessment and annual testing of security, operational, and technical controls of all IT systems
• Develop and implement security configuration policies for all network operating systems and software applications
• Ensure all IA staff have been properly trained and certified in information security
• Provide effective IA training and track and monitor completion of training for DoDEA's management and employees