Department of Defense
INSTRUCTION
NUMBER 8580.1
July 9, 2004
ASD(NII)
SUBJECT: Information Assurance (IA) in the Defense Acquisition System
References: (a) Chapter 25 of title 40, United States Code
(b) DoD Directive 8500.1, "Information Assurance," October 24, 2002
(c) DoD Instruction 8500.2, "Information Assurance (IA) Implementation,"
February 6, 2003
(d) DoD Directive 5000.1, "The Defense Acquisition System,"
May 12, 2003
(e) through (k), see enclosure 1
1. PURPOSE
This Instruction:
1.1. Implements policy, assigns responsibilities, and prescribes procedures under
references (a), (b), and (c) necessary to integrate information assurance (IA) into the
Defense Acquisition System described in reference (d) and DoD Instruction 5000.2
(reference (e)).
1.2. Describes required and recommended levels of IA activities relative to the
acquisition of systems and services.
1.3. Describes the essential elements of an Acquisition IA Strategy, its applicability,
and prescribes an Acquisition IA Strategy submission and review process.
2. APPLICABILITY AND SCOPE
This Instruction:
2.1. Applies to the Office of the Secretary of Defense, the Military Departments, the
Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Office of the
