Information Assurance Vulnerability Alert (IAVA)

[Resheph]

The IAVA provide joint policy and responsibilities for Information Assurance (IA) and support to Computer Network Defense (CND) in accordance with Department of Defense Directive (DODD) 8500.01E.

Major incident categories

• Category 1 - Root level intrusion providing unauthorized privileged access
• Category 2 - User level intrusion providing non-privileged access
• Category 4 - denial of service
• Category 7 - New active propagation of malware infecting a Department of Defense (DOD) Information System (IS) or malicious code adversely affecting the operations and/or security of DOD IS events or incidents affecting Mission Assurance Category (MAC) I or II DOD ISs.

Source: https://fas.org/irp/doddir/dod/cjcsi6510_01.pdf