HSPD-12 and the Personal Identity Verification (PIV) System Procurement Briefing by Corrine Irwin January 2008

2 HSPD-12 states: “… it is the policy of the United States to enhance security, increase Government efficiency, reduce identity fraud, and protect personal privacy by establishing a mandatory Government-wide standard for secure and reliable forms of identification issued by the Federal Government to its employees and contractors (including contractor employees)” What it Means to Us: Background investigations for civil servants (CS), contractors and offsite or remote-only IT users New badges for CS and contractors Use the badge to access IT systems, applications, desktops, laptops, and servers as well as access to our centers and other facilities Reminder: Homeland Security Presidential Directive 12 (HSPD-12)

3 Status Continued  Activities to date have largely been to ensure EXISTING workers have the proper identity vetting to meet HSPD-12 requirements.  Transitional processes and systems have been used to vet existing and new workers through 2007  Steady State processes for NEW workers will be implemented beginning February 1, 2008

4 New: What is Different Old:

5 Changes for COTRs  Must request/approve new contractor employees through the PIV system as of February 1, 2008  Must complete Risk Designation forms for new contractor employees as of February 1, 2008  Must request Disable Identity for contractors who leave  Must use same process for contractors accessing NASA Systems as is used for badged contractors  Must take PIV Training through SATERN

6 Changes for Procurement  Must closely coordinate contract changeover and new contract award with on-site performance PIV requirements make it very difficult to handle a one-day turnover  Need close coordination with Security to keep COTR designations up-to-date  Need “Super PIV Sponsors” in Procurement to handle emergency PIV Requests Who should be Super PIV Sponsors?

7 New Worker Timeline  As soon as worker accepts a position: Use IdMAX to Create Identity and submit PIV Request Complete Risk Determination form and submit to Security  Before worker’s Entry on Duty (EOD): Ensure worker completes eQIP Ensure worker visits GSFC to be enrolled  On EOD: Worker will receive either a temporary badge or a permanent badge  The earlier you start, the more likely the worker is to receive a permanent badge at EOD  Identity must exist in IdMAX before a worker can get: Active Directory Account (NOMAD) VPN account  The earlier you start, the more likely the worker will be able to access basic IT services at EOD