1. NIH is a Valuable Place with Valuable People: We Need to Protect it! Cyber threat is one of the most serious economic and national security challenges that we face as a Nation. Implementing HSPD-12 is part of building a secure digital infrastructure to strengthen NIH’s defenses against data theft and security breaches, and to protect our research, our patients and our information. Your HHS ID Badge provides an easy and standard way to encrypt sensitive information, making it safer for you to share information with the right people and only the right people. NIH employees, affiliates, and contractors can work remotely in a secure manner as an HHS ID Badge and the PIN provide a simple and secure way to access the NIH network from any location. ONE Card, ONE PIN. When this initiative is fully implemented, all you need to access the NIH network and facilities is your HHS ID Badge and your PIN that you never have to change. The security of DHHS’s information systems is a top priority in the area of risk management. Compliance with HSPD-12 is part of improving our security policies and procedures and mitigating this risk. What is Happening? The NIH is changing the way we access information systems and the network by transitioning away from usernames and passwords to smart card authentication with our HHS ID Badges (PIV card). Two-factor authentication (something you have, like a your HHS ID Badge, and something you know, like a PIN) was recently enforced for VPN remote access, and will next be enforced for the Integrated Time and Attendance System (ITAS) and direct access to the NIH network. US Department of Health and Human Services National Institutes of Health The Continued Implementation of HSPD-12 Securing NIH’s Network and Facilities The Continued Implementation of HSPD-12 Securing NIH’s Network and Facilities Mark These Milestones June 18, 2012: Smart card authentication, with your HHS ID Badge and PIN, will be required to access ITAS on Windows computers. Username and password access to ITAS will still be supported for Blackberry devices and Mac computers. March 29, 2013: Smart card authentication, with your HHS ID Badge and PIN, will be required to access the NIH network on government furnished Windows computers. Mac computers and scientific and emergency equipment will be exempt at this time. Note: To balance available resources, ICs have interim completion target dates between now and March 2013. June 27, 2014: Smart card authentication will be enforced for all physical access and electronic validation of non-HHS ID Badges. What is HSPD-12? The Homeland Security Presidential Directive 12 (HSPD-12) is a government-wide mandate to safeguard the Federal community, information, systems, and facilities through identity certification and access management. HSPD-12 mandates a Federal standard for secure and reliable forms of identification such as our HHS ID badges. NIH has made significant progress with HSPD-12 our HHS ID Badge issuance, and now will leverage that investment with the use of its smart card authentication capabilities for both physical and logical access for all NIH resources. This investment will provide NIH with added protection against today’s cyber threats. More Information about HSPD-12 at NIH Please visit http://smartcard.nih.gov or http://idbadge.nih.gov for more information. Resources to support your IC are also available at: http://www.ors.od.nih.gov/ser/dpsac/Pages/Continued-Implementation-of-HSPD-12.aspxhttp://smartcard.nih.govhttp://idbadge.nih.govhttp://www.ors.od.nih.gov/ser/dpsac/Pages/Continued-Implementation-of-HSPD-12.aspx