Federal CIO Council Information Security and Identity Management Committee IDManagement.gov FICAM Testing Program and Approved Products List (APL) Overview.

Slides:



Advertisements
Similar presentations
For Joe Broghamer Philip S. Lee May 5, 2005 Implementing PIV Specifications HSPD-12 Workshop.
Advertisements

June 27, 2005 Preparing your Implementation Plan.
Status of U.S. Smart Card Deployment Jim Dray Porvoo 7/ World eID Meeting May 2005.
Single Sign-On and Federated Authentication at NIH and Beyond
Overview of US Federal Identity Management Initiatives Peter Alterman, Ph.D. Chair, Federal PKI Policy Authority and Asst. CIO E-Authentication, NIH.
1 HSPD-12 Compliance: The Role of Federal PKI Judith Spencer Chair, Federal Identity Credentialing Office of Governmentwide Policy General Services Administration.
NIH is a Valuable Place with Valuable People: We Need to Protect it! Cyber threat is one of the most serious economic and national security challenges.
Effectively Integrating Information Technology (IT) Security into the Acquisition Process Section 4: Effective Integration.
The Federation for Identity and Cross-Credentialing Systems (FiXs) FiXs ® - Federated and Secure Identity Management in Operation Implementing.
15June’061 NASA PKI and the Federal Environment 13th Fed-Ed PKI Meeting 15 June ‘06 Presenter: Tice DeYoung.
1 1 A Synopsis of Federal Information Processing Standard (FIPS) 201 for Personal Identity Verification (PIV) of Federal Employees and Contractors Presentation.
Public Key Infrastructure (PKI) Hosting Services.
Department of Health and Human Services Personal Identity Verification Training APPLICANT.
Proposed Maturity Model for
FIPS 201 Personal Identity Verification For Federal Employees and Contractors National Institute of Standards and Technology Information Technology Laboratory.
Federal Identity Management
Enterprise PACS Best Practices
“Personal Identity Verification (PIV) of Federal Employees and Contractors” October 27, 2005 Homeland Security Presidential Directive 12 (HSPD-12)
Spring 2013 ICAM Day Value of ICAM Breakout Session Paul D. Grant Director of Cybersecurity Policy, DoD CIO Co-Chair, Federal Identity, Credential &
U.S. General Services Administration General Services Administration Policy, the Procurement Process, the Buy Accessible Wizard, and Purchasing Section.
FICAM Testing Program For more information, please contact GSA-FICAM- The FIPS 201 Evaluation Program is now the FICAM Testing.
Federal Information Processing Standard (FIPS) 201, Personal Identity Verification for Federal Employees and Contractors Tim Polk May.
EDUCAUSE Fed/Higher ED PKI Coordination Meeting
Office of the Chief Information Officer EFCOG Annual Meeting Fred Catoe (IM-32) U.S. Department of Energy.
HW&W, Incorporated 7602 Granada Drive Bethesda, MD Telephone: H W & W, Incorporated e-Business Strategies “Providing Just-in-Time Solutions.
NIH iTrust Peter Alterman/Debbie Bucci National Institutes of Health October 2010.
1 Implementation of Homeland Security Presidential Directive 12 David Temoshok Director, Identity Policy and Management GSA Office of Governmentwide FED/ED.
Office of Acquisition and Logistics Management Simplified Acquisitions Committee (SAC) NITAAC Overview – ECS III Contract Charles Hicks, Supervisory Contracting.
Introduction to OIX: A Market Solution to Online Identity Trust Don Thibeau.
Homeland Security Presidential Directive-12 (HSPD-12)
National Incident Management System Overview Briefing Fiscal Year (FY) 2006 Implementation NIMS Requirements for States and Local Jurisdictions Carole.
Introduction & Overview April 11, 2011 Barry Haaser Managing Director.
HSPD-12 and FIPS-201 Overview v Learning Objectives At the end of this course, you will be able to: Describe Homeland Security Presidential Directive.
A Combat Support Agency Defense Information Systems Agency Expanding Non-DOD Partnerships 17 August 2011.
Important acronyms AO = authorizing official ISO = information system owner CA = certification agent.
Use of Identity Credentials in Public Transit Fare Payment Systems Professional Capacity Building Program T3 Webinar June 29, 2011 Washington Metropolitan.
1 EAP and EAI Alignment: FiXs Pilot Project December 14, 2005 David Temoshok Director, Identity Policy and Management GSA Office of Governmentwide Policy.
Federal Acquisition Service U.S. General Services Administration June 3, 2013 Joint Working Group on Improving Cybersecurity and Resilience through Acquisition.
1 This Presentation is printed on recycled materials.
October 2, CIO Executive Committee Federal CIO Council Strategic Plan Development Presented at October 2, 2009 Meeting.
Business and Systems Aligned. Business Empowered. TM Federal Identity Management Handbook May 5, 2005.
FITARA & OMB Guidance June 22, 2015.
ISA Setting the Standard for Automation ™ Automation Standards Compliance Institute ISA Security Compliance Institute (ISCI) Prepared by: Andre Ristaino,
Non-Employee Identity System (NEIS) Adjudicator Training.
HSPD-12 Identity Management Initiative Carol Bales Senior Policy Analyst United States Office of Management and Budget North American Day 2006.
Federal IT Project Manager Agency Management Guidance Levels & Organizational Responsibilities for Projects Reported to OMB IT Project Manager Requirements.
HSPD-12 and the Personal Identity Verification (PIV) System Procurement Briefing by Corrine Irwin January 2008.
EGovOS Panel Discussion CIO Council Architecture & Infrastructure Committee Subcommittee Co-Chairs March 15, 2004.
GSA/OGP Section 508 Program Overview
1 Geospatial Line of Business Update FGDC Coordination Group April 14, 2009.
1 Federal Identity Management Initiatives Federal Identity Management Initatives David Temoshok Director, Identity Policy and Management GSA Office of.
Fax: (703) DoD BIOMETRICS PROGRAM DoD Biometrics Management Office Phone: (703)
Effectively Integrating Information Technology (IT) Security into the Acquisition Process A course for the Department of Commerce contracting and contracting.
Transforming Government Federal e-Authentication Initiative David Temoshok Director, Identity Policy and Management GSA Office of Governmentwide Policy.
Donald Rosen National Archives and Records Administration Office of the Chief Records Officer BRIDG Meeting June 19, 2013 Managing Government Records Progress.
Government and Industry IT: one vision, one community Vice Chairs April Meeting Agenda Welcome and Introductions GAPs welcome meeting with ACT Board (John.
Presented by Eliot Christian, USGS Accessibility, usability, and preservation of government information (Section 207 of the E-Government Act) April 28,
1 This Presentation is printed on recycled materials.
Federal Preparedness Credentialing & Typing. H.R. 1 - Requirement Title IV of the “Implementing Recommendations of the 9/11 Commission Act of 2007” directs.
Federal Acquisition Service U.S. General Services Administration Region 7 Industry Day February 24, 2015.
Important acronyms AO = authorizing official ISO = information system owner CA = certification agent.
Advanced Planning Brief to Industry Jerry L. Davis DAS, Office of Information Security June 9, 2011.
The Federal E-Authentication Initiative David Temoshok Director, Identity Policy GSA Office of Governmentwide Policy February 12, 2004 The E-Authentication.
FITARA & OMB Guidance June 22, Federal Information Technology Acquisition Reform Act (FITARA)
Utilizing GSA for Procurements.
EDUCAUSE Fed/Higher ED PKI Coordination Meeting
HIMSS National Conference New Orleans Convention Center
Vijay Rachamadugu and David Snyder September 7, 2006
A Quick Tour of the FIPS 201 Revision
Presentation transcript:

Federal CIO Council Information Security and Identity Management Committee IDManagement.gov FICAM Testing Program and Approved Products List (APL) Overview June 18, 2013

2 FIPS 201 Evaluation Program  FIPS 201 Evaluation Program (EP) operates a testing program for HSPD-12 related requirements  Products that interact with PIV Cards  Conformance to the FIPS 201 Standard  The Approved Products List (APL) is the official list of products that have passed conformance testing  The Goal: help industry understand federal requirements and help agencies find conformant products

3 Governing Policies  Homeland Security Presidential Directive 12 (HSPD- 12)  Requires mandatory Government-wide standard for secure and reliable forms of identification for Federal employees and contractors (i.e., FIPS 201, PIV Cards).  OMB Memorandum M  GSA designated as “executive agent for Government-wide acquisitions of information technology" for products/services required for implementing HSPD-12.  OMB Memorandum M  Directs that agencies must acquire products and services that are approved as compliant with Federal policy, standards and supporting technical specifications in order to ensure government- wide interoperability.

4 FICAM Testing Program OMB M-11-11: GSA will continue to administer the Interoperability Test Program and Approved Products and Services List for HSPD-12. Will provide agencies with guidance for implementing “Federal Identity, Credential, and Access Management.”

5 FICAM Testing Program Continuous Improvement (“Spirals”)

6 Spiral #1 is Currently Underway  Initial “Spiral #1” focus on Physical Access Control Systems  Created functional requirements –More stringent security requirements –PIV, PIV-I, CAC  Established integrated solution testing –Products will be tested as a complete solution  New Categories –Deprecating PACS transparent readers in favor of FICAM Readers –Adding Validation System, PACS Infrastructure

7 Coming Soon  ICAM Test Cards  Used for Security and Interoperability Testing  Available to the community for independent testing  New PACS Products on the APL  Testing is ready to begin  Vendors have already started applying  New Testing Program Website  System Builder tool to facilitate integration planning  Procurement Guidance for agencies  Retesting of APL listed products to ensure satisfaction of updated testing requirements

8 How Do I Plug In or Get More Information?  FIPS 201 EP Website: testing-program  Contact Chi Hickey  FICAM Testing Program Manager   Participate in the Evaluation Program Technical Working Group (EPTWG)  Join us for the Breakout Session at 12:30 or 1:20  Visit us at our booth