HSPD-12and the

Personal Identity

Verification (PIV)System

Procurement Briefing

by Corrine IrwinJanuary 2008

2

HSPD-12 states: “… it is the policy of the United States to enhance

security, increase Government efficiency, reduce identity fraud, and protect personal privacy by establishing a mandatory Government-wide standard for secure and reliable forms of identification issued by the Federal Government to its employees and contractors (including contractor employees)”

What it Means to Us: • Background investigations for civil servants (CS),

contractors and offsite or remote-only IT users• New badges for CS and contractors• Use the badge to access IT systems, applications,

desktops, laptops, and servers as well as access to our centers and other facilities

Reminder: Homeland Security Presidential Directive 12 (HSPD-12)

3

Status Continued Activities to date have largely been to

ensure EXISTING workers have the proper identity vetting to meet HSPD-12 requirements.

Transitional processes and systems have been used to vet existing and new workers through 2007

Steady State processes for NEW workers will be implemented beginning February 1, 2008

4

New:

What is Different

IdMAXPIV Requestor IdMAX

PIV SponsorIdMAX

PIV Authorizor

ApproveRequest

Authorize

Old:

LISTS Form

Contractor Rep

LISTS

COTR

LISTS Form

LISTS

Approve

Security

LISTS

Update LISTS

Authorize

Request

5

Changes for COTRs Must request/approve new contractor employees

through the PIV system as of February 1, 2008 Must complete Risk Designation forms for new

contractor employees as of February 1, 2008 Must request Disable Identity for contractors who

leave Must use same process for contractors accessing

NASA Systems as is used for badged contractors Must take PIV Training through SATERN

6

Changes for Procurement Must closely coordinate contract changeover and

new contract award with on-site performance PIV requirements make it very difficult to

handle a one-day turnover Need close coordination with Security to keep

COTR designations up-to-date Need “Super PIV Sponsors” in Procurement to

handle emergency PIV Requests Who should be Super PIV Sponsors?

7

New Worker Timeline As soon as worker accepts a position:

Use IdMAX to Create Identity and submit PIV Request Complete Risk Determination form and submit to Security

Before worker’s Entry on Duty (EOD): Ensure worker completes eQIP Ensure worker visits GSFC to be enrolled

On EOD: Worker will receive either a temporary badge or a permanent

badge The earlier you start, the more likely the worker is

to receive a permanent badge at EOD Identity must exist in IdMAX before a worker can

get: Active Directory Account E-mail (NOMAD) VPN account

The earlier you start, the more likely the worker will be able to access basic IT services at EOD