1. Preparing your Implementation Plan
June 27, 2005
Preparing your
Implementation Plan

2. Streamlining the Requirement: Using the Template
Based on the Control Objectives from HSPD-12
Approximately 20 Multiple choice questions:
1 – Not started. Agency has not begun implementing the specific requirement or current process/implementation is not sufficient.
2 – Planning in progress. Agency has begun the planning necessary to meet the specific requirement.
3 – Planning complete, acquisition underway. Agency has completed the necessary planning to meet the specific requirement. If an acquisition is required, the acquisition plan has been completed or it is underway.
4 – Implementation in progress. Agency is acquiring or implementing the products or services to meet the specific requirement.
5 – Implementation Complete. Agency has fully met the specific requirement.

3. Control Objectives
1) Identification Issued based on sound criteria for verifying an individuals identity
2) Identification that is issued only by providers whose reliability has been established by an official accreditation process
3) Identification that is strongly resistant to identity fraud, tampering, counterfeiting, and terrorist exploitation
4) Identification that can be rapidly authenticated electronically
Plus:
Agency meets all security and privacy control objectives

4. The Agency Plan Over the next two days: Tomorrow afternoon:
Think about the information being provided in the context of your agency
Determine where your agency falls in the process and what needs to be done.
Tomorrow afternoon:
We will walk through the draft agency plan and discuss the questions individually

5. Keep In Mind: The Dates
October 27, 2005 – Compliance with FIPS 201 Part 1
October 27, 2006 – Compliance with FIPS 201 Part 2