1. Homeland Security Presidential
Directive 12 (HSPD-12)
Policies & Procedures
Western Region Security Office
March 7, 2006
U.S. Department of Commerce
Office Of Security (OSY)
Security is Everyone's Responsibility

2. Security is Everyone's Responsibility
Definition
HSPD-12 is a government-wide standard for secure and reliable identification for federal employees and contractors.
It directs the implementation of a new standardized badging process, which is designed to enhance security, reduce identity fraud, and protect the personal privacy of those issued government identification.
Implemented October 2005.
Security is Everyone's Responsibility

3. Security is Everyone's Responsibility
Program Requirements
Everyone issued an ID badge must have a favorable background investigation, including FBI fingerprint check; for most people, this will mean a National Agency Check with Inquiries (NACI).
All personnel must be “identity-proofed,” that is, they must present two forms of identification to verify their identity.
No one person can be the sole official that requests, authorizes, and issues a badge.
Security is Everyone's Responsibility

4. Security is Everyone's Responsibility
Roles
Applicant
The individual to whom a PIV card will be issued.
Sponsor
Validates Applicant’s requirement for a PIV card, initiates PIV Request, conducts identity proofing, ensures Applicant has completed training and documentation.
Enrollment Official
Performs identity proofing and document gathering for Applicants remote to PCIF.
Registrar
Final approval authority for PIV card issuance; ensures ID proofing, background checks and training has been completed.
PCIF Issuer
Creates and issues the PIV card upon Registrar approval.
Remote Issuer
Issues the PIV card to Applicants remote to the PCIF
Security is Everyone's Responsibility

5. Security is Everyone's Responsibility
Role Requirements
Appointed in writing
Current NACI (or higher) on file
PIV training completed and certificate forwarded to WRSO
U.S. Citizens
Federal employees*
*Note: PCIF and/or Remote Issuers may be federal contractors
Security is Everyone's Responsibility

6. Security is Everyone's Responsibility
Acronyms
COR—Contracting Officer Representative
COTR—Contracting Officer Technical Representative
HSPD—Homeland Security Presidential Directive
NAC—National Agency Check (fingerprint check-plus)
NACI—National Agency Check with Inquiries (full background investigation)
OPM—Office of Personnel Management (investigative agency)
OSY—Office of Security (HQ, Dept of Commerce)
PCIF—PIV Card Issuing Facility
PIV—Personal Identity Verification
WFMO—Workforce Management Office (HR)
WRSO—Western Region Security Office
Security is Everyone's Responsibility

7. Security is Everyone's Responsibility
PIV Documentation
PIV Request Form
Security Coversheet for Non-Employees (SCNE)
Legible copy of identification documents (one must be photo ID issued by federal or state government agency)
PIV Applicant training certificate
Proof of prior investigation, OR
SF85, 85P, or 86 Questionnaire
OF 306, Declaration for Federal Employment
Fingerprint cards (FD 258 for non-employees, SF87 for employees)
Fair Credit Reporting Act Form (for SF85P and SF86 only)
Current resume (employees only)
Security is Everyone's Responsibility

8. Security is Everyone's Responsibility
Procedures--Local
Sponsor sends/gives paperwork
Applicant fills it out and gives it to Sponsor
Sponsor ID-proofs Applicant, checks paperwork, submits packet to Registrar (WRSO)
Applicant comes to PCIF (WRSO) for fingerprints, photo
Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card
PCIF Issuer prepares card
Applicant returns to PCIF and signs for PIV card.
Security is Everyone's Responsibility

9. Security is Everyone's Responsibility
Procedures--Remote
Sponsor fills out PIV Request and sends it to Enrollment Official; sends investigative paperwork to Applicant
Applicant fills out investigative paperwork, takes training, and reports to his/her local Enrollment Official
Enrollment Official ID-proofs Applicant, takes photo, collects fingerprints, checks paperwork, submits packet to Sponsor
Sponsor reviews documentation and submits packet to Registrar (WRSO)
Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card
PCIF Issuer prepares card and sends it to Remote Issuer
Applicant reports to Remote Issuer and signs for PIV card
Remote Issuer returns completed original PIV Request Form to Registrar.
Security is Everyone's Responsibility

10. Security is Everyone's Responsibility
Short Term Visitors
Definition
Contractors, guests, and affiliates working on a federal facility for less than six months (180 days)
Procedures
--Submit fingerprints/fingerprint cards for criminal history check
--Fill out and submit OF 306, Declaration for Federal Employment
Security is Everyone's Responsibility

11. Security is Everyone's Responsibility
HSPD-12 Changes
PIV Card has slightly different look
NOAA logo replaced by DOC logo
PIV cards will be numbered as follows: “PIV-1 Wnnnnn”
No same-day PIV cards for new employees and contractors
Security Worksheet for Non-Employees (SWNE) replaced with memo-format Security Coversheet for Non-Employees (SCNE)
CD 390 ID and Key Request no longer required for badges; replaced by PIV Request Form and cover sheet
Security is Everyone's Responsibility

12. Changes Since HSPD-12 Implementation
I-9 for ID-proofing no longer required
Fair Credit Reporting Act Form no longer required for SF85s
Federal supervisors can serve as sponsors for renewing employees
All other renewals will be processed via PIV procedures
Security is Everyone's Responsibility

13. Security is Everyone's Responsibility
Common Errors
PIV Request and SF85 sent without cover sheet
Needed to process investigation or verify investigation is on file with OPM
Signatures missing on PIV Request Form
Section A (Sponsor)
Section B (Sponsor or Enrollment Official).
Copies submitted
Send original PIV Request Form and SF85, with original signatures
SF85 contains numerous errors. Please refer to and use the SF85 Return Checklist to catch the most common errors
PIV Request Form signed by non-Sponsor or non-Enrollment Official
Contractor PIV Request Form signed by Sponsor who is not a COR/COTR
Fingerprint cards smudged; prints pressed not rolled; missing key areas, such as the joint line
Security is Everyone's Responsibility

14. Security is Everyone's Responsibility
What the Future Holds
PIV-2 coming
Smart card chip and interoperability for physical and logical access
“Smart” features include Public Key Infrastructure encryption and limited biometrics to reduce/eliminate need for multiple passwords
Initial implementation October 2006
Full implementation (only PIV-2 cards issued) by October 2007
Will require hardware/software and access control systems which are compatible with PIV-2
100% of employees, contractors, and long-term guests/affiliates must have completed background investigation on file by October 2007
Security is Everyone's Responsibility

15. HSPD-12 Points of Contact Western Region Security Office
Regional Security Officer/PCIF Manager
Cheryl Wieser,
HSPD-12 Point of Contact/Registrar
Jason Haack, Security Specialist,
HSPD-12 Registrar
Joseph Lubin, Security Specialist,
Michael Shearin, Security Specialist,
WRSO Fax,
Security is Everyone's Responsibility

16. HSPD-12 Points of Contact DOC Office of Security
HSPD-12 Program Manager
Pat Billiter, Agency Identity Management Official,
Agency Official for Privacy
Dan Rooney,
HSPD-12 Help Desk
Training Assistance
HSPD-12 Website (HSPD-12 menu on left)
Security is Everyone's Responsibility

17. Security is Everyone's Responsibility
Questions?
Security is Everyone's Responsibility