Homeland Security Presidential Directive 12 (HSPD-12) Policies & Procedures Western Region Security Office March 7, 2006 U.S. Department of Commerce Office Of Security (OSY) Security is Everyone's Responsibility

Security is Everyone's Responsibility Definition HSPD-12 is a government-wide standard for secure and reliable identification for federal employees and contractors. It directs the implementation of a new standardized badging process, which is designed to enhance security, reduce identity fraud, and protect the personal privacy of those issued government identification. Implemented October 2005. Security is Everyone's Responsibility

Security is Everyone's Responsibility Program Requirements Everyone issued an ID badge must have a favorable background investigation, including FBI fingerprint check; for most people, this will mean a National Agency Check with Inquiries (NACI). All personnel must be “identity-proofed,” that is, they must present two forms of identification to verify their identity. No one person can be the sole official that requests, authorizes, and issues a badge. Security is Everyone's Responsibility

Security is Everyone's Responsibility Roles Applicant The individual to whom a PIV card will be issued. Sponsor Validates Applicant’s requirement for a PIV card, initiates PIV Request, conducts identity proofing, ensures Applicant has completed training and documentation. Enrollment Official Performs identity proofing and document gathering for Applicants remote to PCIF. Registrar Final approval authority for PIV card issuance; ensures ID proofing, background checks and training has been completed. PCIF Issuer Creates and issues the PIV card upon Registrar approval. Remote Issuer Issues the PIV card to Applicants remote to the PCIF Security is Everyone's Responsibility

Security is Everyone's Responsibility Role Requirements Appointed in writing Current NACI (or higher) on file PIV training completed and certificate forwarded to WRSO U.S. Citizens Federal employees* *Note: PCIF and/or Remote Issuers may be federal contractors Security is Everyone's Responsibility

Security is Everyone's Responsibility Acronyms COR—Contracting Officer Representative COTR—Contracting Officer Technical Representative HSPD—Homeland Security Presidential Directive NAC—National Agency Check (fingerprint check-plus) NACI—National Agency Check with Inquiries (full background investigation) OPM—Office of Personnel Management (investigative agency) OSY—Office of Security (HQ, Dept of Commerce) PCIF—PIV Card Issuing Facility PIV—Personal Identity Verification WFMO—Workforce Management Office (HR) WRSO—Western Region Security Office Security is Everyone's Responsibility

Security is Everyone's Responsibility PIV Documentation PIV Request Form Security Coversheet for Non-Employees (SCNE) Legible copy of identification documents (one must be photo ID issued by federal or state government agency) PIV Applicant training certificate Proof of prior investigation, OR SF85, 85P, or 86 Questionnaire OF 306, Declaration for Federal Employment Fingerprint cards (FD 258 for non-employees, SF87 for employees) Fair Credit Reporting Act Form (for SF85P and SF86 only) Current resume (employees only) Security is Everyone's Responsibility

Security is Everyone's Responsibility Procedures--Local Sponsor sends/gives paperwork Applicant fills it out and gives it to Sponsor Sponsor ID-proofs Applicant, checks paperwork, submits packet to Registrar (WRSO) Applicant comes to PCIF (WRSO) for fingerprints, photo Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card PCIF Issuer prepares card Applicant returns to PCIF and signs for PIV card. Security is Everyone's Responsibility

Security is Everyone's Responsibility Procedures--Remote Sponsor fills out PIV Request and sends it to Enrollment Official; sends investigative paperwork to Applicant Applicant fills out investigative paperwork, takes training, and reports to his/her local Enrollment Official Enrollment Official ID-proofs Applicant, takes photo, collects fingerprints, checks paperwork, submits packet to Sponsor Sponsor reviews documentation and submits packet to Registrar (WRSO) Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card PCIF Issuer prepares card and sends it to Remote Issuer Applicant reports to Remote Issuer and signs for PIV card Remote Issuer returns completed original PIV Request Form to Registrar. Security is Everyone's Responsibility

Security is Everyone's Responsibility Short Term Visitors Definition Contractors, guests, and affiliates working on a federal facility for less than six months (180 days) Procedures --Submit fingerprints/fingerprint cards for criminal history check --Fill out and submit OF 306, Declaration for Federal Employment Security is Everyone's Responsibility

Security is Everyone's Responsibility HSPD-12 Changes PIV Card has slightly different look NOAA logo replaced by DOC logo PIV cards will be numbered as follows: “PIV-1 Wnnnnn” No same-day PIV cards for new employees and contractors Security Worksheet for Non-Employees (SWNE) replaced with memo-format Security Coversheet for Non-Employees (SCNE) CD 390 ID and Key Request no longer required for badges; replaced by PIV Request Form and cover sheet Security is Everyone's Responsibility

Changes Since HSPD-12 Implementation I-9 for ID-proofing no longer required Fair Credit Reporting Act Form no longer required for SF85s Federal supervisors can serve as sponsors for renewing employees All other renewals will be processed via PIV procedures Security is Everyone's Responsibility

Security is Everyone's Responsibility Common Errors PIV Request and SF85 sent without cover sheet Needed to process investigation or verify investigation is on file with OPM Signatures missing on PIV Request Form Section A (Sponsor) Section B (Sponsor or Enrollment Official). Copies submitted Send original PIV Request Form and SF85, with original signatures SF85 contains numerous errors. Please refer to and use the SF85 Return Checklist to catch the most common errors PIV Request Form signed by non-Sponsor or non-Enrollment Official Contractor PIV Request Form signed by Sponsor who is not a COR/COTR Fingerprint cards smudged; prints pressed not rolled; missing key areas, such as the joint line Security is Everyone's Responsibility

Security is Everyone's Responsibility What the Future Holds PIV-2 coming Smart card chip and interoperability for physical and logical access “Smart” features include Public Key Infrastructure encryption and limited biometrics to reduce/eliminate need for multiple passwords Initial implementation October 2006 Full implementation (only PIV-2 cards issued) by October 2007 Will require hardware/software and access control systems which are compatible with PIV-2 100% of employees, contractors, and long-term guests/affiliates must have completed background investigation on file by October 2007 Security is Everyone's Responsibility

HSPD-12 Points of Contact Western Region Security Office Regional Security Officer/PCIF Manager Cheryl Wieser, 206-526-6653 CWieser@doc.gov HSPD-12 Point of Contact/Registrar Jason Haack, Security Specialist, 206-526-6006 JHaack@doc.gov HSPD-12 Registrar Joseph Lubin, Security Specialist, 206-526-4317 JLubin@doc.gov Michael Shearin, Security Specialist, 206-526-6674 MShearin@doc.gov WRSO Fax, 206-526-4543 Security is Everyone's Responsibility

HSPD-12 Points of Contact DOC Office of Security HSPD-12 Program Manager Pat Billiter, Agency Identity Management Official, 202-428-4637 PBilliter@doc.gov Agency Official for Privacy Dan Rooney, 202-482-0517 HSPD-12 Help Desk 202-482-8116 Training Assistance osy_piv1training@doc.gov HSPD-12 Website www.osec.doc.gov/osy (HSPD-12 menu on left) Security is Everyone's Responsibility

Security is Everyone's Responsibility Questions? Security is Everyone's Responsibility