Homeland Security Presidential Directive 12 HSPD12 Policies Procedures

Homeland Security Presidential Directive 12 (HSPD-12) Policies & Procedures Western Region Security Office March 7, 2006 U. S. Department of Commerce Office Of Security (OSY) Security is Everyone's Responsibility 1

Definition • HSPD-12 is a government-wide standard for secure and reliable identification for federal employees and contractors. • It directs the implementation of a new standardized badging process, which is designed to enhance security, reduce identity fraud, and protect the personal privacy of those issued government identification. • Implemented October 2005. Security is Everyone's Responsibility 2

Program Requirements • Everyone issued an ID badge must have a favorable background investigation, including FBI fingerprint check; for most people, this will mean a National Agency Check with Inquiries (NACI). • All personnel must be “identity-proofed, ” that is, they must present two forms of identification to verify their identity. • No one person can be the sole official that requests, authorizes, and issues a badge. Security is Everyone's Responsibility 3

Roles • Applicant The individual to whom a PIV card will be issued. • Sponsor Validates Applicant’s requirement for a PIV card, initiates PIV Request, conducts identity proofing, ensures Applicant has completed training and documentation. • Enrollment Official Performs identity proofing and document gathering for Applicants remote to PCIF. • Registrar Final approval authority for PIV card issuance; ensures ID proofing, background checks and training has been completed. • PCIF Issuer Creates and issues the PIV card upon Registrar approval. • Remote Issuer Issues the PIV card to Applicants remote to the PCIF Security is Everyone's Responsibility 4

Role Requirements • • • Appointed in writing Current NACI (or higher) on file PIV training completed and certificate forwarded to WRSO U. S. Citizens Federal employees* *Note: PCIF and/or Remote Issuers may be federal contractors Security is Everyone's Responsibility 5

Acronyms • • • COR—Contracting Officer Representative COTR—Contracting Officer Technical Representative HSPD—Homeland Security Presidential Directive NAC—National Agency Check (fingerprint check-plus) NACI—National Agency Check with Inquiries (full background investigation) OPM—Office of Personnel Management (investigative agency) OSY—Office of Security (HQ, Dept of Commerce) PCIF—PIV Card Issuing Facility PIV—Personal Identity Verification WFMO—Workforce Management Office (HR) WRSO—Western Region Security Office Security is Everyone's Responsibility 6

PIV Documentation • PIV Request Form • Security Coversheet for Non-Employees (SCNE) • Legible copy of identification documents (one must be photo ID issued by federal or state government agency) • PIV Applicant training certificate • Proof of prior investigation, OR • SF 85, 85 P, or 86 Questionnaire • OF 306, Declaration for Federal Employment • Fingerprint cards (FD 258 for non-employees, SF 87 for employees) • Fair Credit Reporting Act Form (for SF 85 P and SF 86 only) • Current resume (employees only) Security is Everyone's Responsibility 7

Procedures--Local 1. Sponsor sends/gives paperwork 2. Applicant fills it out and gives it to Sponsor 3. Sponsor ID-proofs Applicant, checks paperwork, submits packet to Registrar (WRSO) 4. Applicant comes to PCIF (WRSO) for fingerprints, photo 5. Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card 6. PCIF Issuer prepares card 7. Applicant returns to PCIF and signs for PIV card. Security is Everyone's Responsibility 8

Procedures--Remote 1. Sponsor fills out PIV Request and sends it to Enrollment Official; sends investigative paperwork to Applicant 2. Applicant fills out investigative paperwork, takes training, and reports to his/her local Enrollment Official 3. Enrollment Official ID-proofs Applicant, takes photo, collects fingerprints, checks paperwork, submits packet to Sponsor 4. Sponsor reviews documentation and submits packet to Registrar (WRSO) 5. Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card 6. PCIF Issuer prepares card and sends it to Remote Issuer 7. Applicant reports to Remote Issuer and signs for PIV card 8. Remote Issuer returns completed original PIV Request Form to Registrar. Security is Everyone's Responsibility 9

Short Term Visitors • Definition Contractors, guests, and affiliates working on a federal facility for less than six months (180 days) • Procedures --Submit fingerprints/fingerprint cards for criminal history check --Fill out and submit OF 306, Declaration for Federal Employment Security is Everyone's Responsibility 10

HSPD-12 Changes • PIV Card has slightly different look – NOAA logo replaced by DOC logo – PIV cards will be numbered as follows: “PIV-1 Wnnnnn” • No same-day PIV cards for new employees and contractors • Security Worksheet for Non-Employees (SWNE) replaced with memo -format Security Coversheet for Non-Employees (SCNE) • CD 390 ID and Key Request no longer required for badges; replaced by PIV Request Form and cover sheet Security is Everyone's Responsibility 11

Changes Since HSPD-12 Implementation • I-9 for ID-proofing no longer required • Fair Credit Reporting Act Form no longer required for SF 85 s • Federal supervisors can serve as sponsors for renewing employees • All other renewals will be processed via PIV procedures Security is Everyone's Responsibility 12

Common Errors • PIV Request and SF 85 sent without cover sheet • Signatures missing on PIV Request Form • Copies submitted • SF 85 contains numerous errors. Please refer to and use the SF 85 Return Checklist to catch the most common errors • PIV Request Form signed by non-Sponsor or non-Enrollment Official • Contractor PIV Request Form signed by Sponsor who is not a COR/COTR • Fingerprint cards smudged; prints pressed not rolled; missing key areas, such as the joint line – Needed to process investigation or verify investigation is on file with OPM – Section A (Sponsor) – Section B (Sponsor or Enrollment Official). – Send original PIV Request Form and SF 85, with original signatures Security is Everyone's Responsibility 13

What the Future Holds • PIV-2 coming – Smart card chip and interoperability for physical and logical access – “Smart” features include Public Key Infrastructure encryption and limited biometrics to reduce/eliminate need for multiple passwords • Initial implementation October 2006 • Full implementation (only PIV-2 cards issued) by October 2007 • Will require hardware/software and access control systems which are compatible with PIV-2 • 100% of employees, contractors, and long-term guests/affiliates must have completed background investigation on file by October 2007 Security is Everyone's Responsibility 14

HSPD-12 Points of Contact Western Region Security Office • Regional Security Officer/PCIF Manager – Cheryl Wieser, 206 -526 -6653 – CWieser@doc. gov • HSPD-12 Point of Contact/Registrar – Jason Haack, Security Specialist, 206 -526 -6006 – JHaack@doc. gov • HSPD-12 Registrar – Joseph Lubin, Security Specialist, 206 -526 -4317 – JLubin@doc. gov • HSPD-12 Registrar – Michael Shearin, Security Specialist, 206 -526 -6674 – MShearin@doc. gov • WRSO Fax, 206 -526 -4543 Security is Everyone's Responsibility 15

HSPD-12 Points of Contact DOC Office of Security • HSPD-12 Program Manager – Pat Billiter, Agency Identity Management Official, 202 -428 -4637 – PBilliter@doc. gov • Agency Official for Privacy – Dan Rooney, 202 -482 -0517 • HSPD-12 Help Desk 202 -482 -8116 • Training Assistance osy_piv 1 training@doc. gov • HSPD-12 Website www. osec. doc. gov/osy (HSPD-12 menu on left) Security is Everyone's Responsibility 16

Questions? Security is Everyone's Responsibility 17