1. 1 Homeland Security Presidential Directive 12 (HSPD-12) Policies & Procedures Veronica McCann - Security Specialist Western Region Security Office March 7, 2006 U.S. Department of Commerce Office Of Security (OSY)

2. 2 Definition HSPD-12 is a government-wide standard for secure and reliable identification for federal employees and contractors. It directs the implementation of a new standardized badging process, which is designed to enhance security, reduce identity fraud, and protect the personal privacy of those issued government identification. Implemented October 2005.

3. 3 Program Requirements Everyone issued an ID badge must have a favorable background investigation, including FBI fingerprint check; for most people, this will mean a National Agency Check with Inquiries (NACI). All personnel must be “identity-proofed,” that is, they must present two forms of identification to verify their identity. No one person can be the sole official that requests, authorizes, and issues a badge.

4. 4 Roles Applicant The individual to whom a PIV card will be issued. Sponsor Validates Applicant’s requirement for a PIV card, initiates PIV Request, conducts identity proofing, ensures Applicant has completed training and documentation. Enrollment Official Performs identity proofing and document gathering for Applicants remote to PCIF. Registrar Final approval authority for PIV card issuance; ensures ID proofing, background checks and training has been completed. PCIF Issuer Creates and issues the PIV card upon Registrar approval. Remote Issuer Issues the PIV card to Applicants remote to the PCIF

5. 5 Role Requirements Appointed in writing Current NACI (or higher) on file PIV training completed and certificate forwarded to WRSO U.S. Citizens Federal employees* *Note: PCIF and/or Remote Issuers may be federal contractors

6. 6 Acronyms COR—Contracting Officer Representative COTR—Contracting Officer Technical Representative HSPD—Homeland Security Presidential Directive NAC—National Agency Check (fingerprint check-plus) NACI—National Agency Check with Inquiries (full background investigation) OPM—Office of Personnel Management (investigative agency) OSY—Office of Security (HQ, Dept of Commerce) PCIF—PIV Card Issuing Facility PIV—Personal Identity Verification WFMO—Workforce Management Office (HR) WRSO—Western Region Security Office

7. 7 PIV Documentation PIV Request Form Security Coversheet for Non-Employees (SCNE) Legible copy of identification documents (one must be photo ID issued by federal or state government agency) PIV Applicant training certificate Proof of prior investigation, OR SF85, 85P, or 86 Questionnaire OF 306, Declaration for Federal Employment Fingerprint cards (FD 258 for non-employees, SF87 for employees) Fair Credit Reporting Act Form (for SF85P and SF86 only) Current resume (employees only)

8. 8 Procedures--Local 1.Sponsor sends/gives paperwork 2.Applicant fills it out and gives it to Sponsor 3.Sponsor ID-proofs Applicant, checks paperwork, submits packet to Registrar (WRSO) 4.Applicant comes to PCIF (WRSO) for fingerprints, photo 5.Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card 6.PCIF Issuer prepares card 7.Applicant returns to PCIF and signs for PIV card.

9. 9 Procedures--Remote 1.Sponsor fills out PIV Request and sends it to Enrollment Official; sends investigative paperwork to Applicant 2.Applicant fills out investigative paperwork, takes training, and reports to his/her local Enrollment Official 3.Enrollment Official ID-proofs Applicant, takes photo, collects fingerprints, checks paperwork, submits packet to Sponsor 4.Sponsor reviews documentation and submits packet to Registrar (WRSO) 5.Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card 6.PCIF Issuer prepares card and sends it to Remote Issuer 7.Applicant reports to Remote Issuer and signs for PIV card 8.Remote Issuer returns completed original PIV Request Form to Registrar.

10. 10 Short Term Visitors Definition Contractors, guests, and affiliates working on a federal facility for less than six months (180 days) Procedures --Submit fingerprints/fingerprint cards for criminal history check --Fill out and submit OF 306, Declaration for Federal Employment

11. 11 HSPD-12 Changes PIV Card has slightly different look –NOAA logo replaced by DOC logo –PIV cards will be numbered as follows: “PIV-1 Wnnnnn” No same-day PIV cards for new employees and contractors Security Worksheet for Non-Employees (SWNE) replaced with memo-format Security Coversheet for Non-Employees (SCNE) CD 390 ID and Key Request no longer required for badges; replaced by PIV Request Form and cover sheet

12. 12 Changes Since HSPD-12 Implementation I-9 for ID-proofing no longer required Fair Credit Reporting Act Form no longer required for SF85s Federal supervisors can serve as sponsors for renewing employees Bargaining unit employees will utilize old process; obtain six-month badge All other renewals will be processed via PIV procedures

13. 13 Common Errors PIV Request and SF85 sent without cover sheet –Needed to process investigation or verify investigation is on file with OPM Signatures missing on PIV Request Form –Section A (Sponsor) –Section B (Sponsor or Enrollment Official). Copies submitted –Send original PIV Request Form and SF85, with original signatures SF85 contains numerous errors. Please refer to and use the SF85 Return Checklist to catch the most common errors PIV Request Form signed by non-Sponsor or non-Enrollment Official Contractor PIV Request Form signed by Sponsor who is not a COR/COTR Fingerprint cards smudged; prints pressed not rolled; missing key areas, such as the joint line

14. 14 What the Future Holds PIV-2 coming –Smart card chip and interoperability for physical and logical access –“Smart” features include Public Key Infrastructure encryption and limited biometrics to reduce/eliminate need for multiple passwords Initial implementation October 2006 Full implementation (only PIV-2 cards issued) by October 2007 Will require hardware/software and access control systems which are compatible with PIV-2 100% of employees, contractors, and long-term guests/affiliates must have completed background investigation on file by October 2007

15. 15 HSPD-12 Points of Contact Western Region Security Office Regional Security Officer/PCIF Manager –Cheryl Wieser, 206-526-6653 –Cheryl.L.Wieser@noaa.gov HSPD-12 Point of Contact/Registrar –Veronica McCann, Security Specialist, 206-526-6674 –Veronica.L.Mccann@noaa.gov HSPD-12 Registrar –Joseph Lubin, Security Specialist, 206-526-4317 –Joseph.A.Lubin@noaa.gov HSPD-12 Registrar –Robert Conley, Security Specialist, 206-526-6429 –Robert.H.Conley@noaa.gov WRSO Fax, 206-526-4543

16. 16 HSPD-12 Points of Contact DOC Office of Security HSPD-12 Program Manager –Ron Martin, Agency Identity Management Official, 202-428-4637 –RMartin@doc.gov HSPD-12 Management Analyst –Patricia Billeter, PIV Card Applicant Representative, 202-482-5772 –PBilleter@doc.gov Agency Official for Privacy –Dan Rooney, 202-482-0517 HSPD-12 Help Desk202-482-8116 Training Assistance osy_piv1training@doc.gov HSPD-12 Website www.osec.doc.gov/osy (HSPD-12 menu on left)

17. 17 Questions?

18. 18 Presenter Information Veronica McCann Western Region Security Office 7600 Sand Point Way NE Seattle, WA 98115 Phone: (206) 526-6674 Fax: (206) 526-4543 VMccann@doc.gov or veronica.l.mccann@noaa.gov