1

Homeland Security PresidentialDirective 12 (HSPD-12)

Policies & Procedures

Veronica McCann - Security SpecialistWestern Region Security Office

March 7, 2006

U.S. Department of Commerce

Office Of Security (OSY)

2

Definition

• HSPD-12 is a government-wide standard for secure and reliable identification for federal employees and contractors.

• It directs the implementation of a new standardized badging process, which is designed to enhance security, reduce identity fraud, and protect the personal privacy of those issued government identification.

• Implemented October 2005.

3

Program Requirements

• Everyone issued an ID badge must have a favorable background investigation, including FBI fingerprint check; for most people, this will mean a National Agency Check with Inquiries (NACI).

• All personnel must be “identity-proofed,” that is, they must present two forms of identification to verify their identity.

• No one person can be the sole official that requests, authorizes, and issues a badge.

4

Roles

• ApplicantThe individual to whom a PIV card will be issued.

• SponsorValidates Applicant’s requirement for a PIV card, initiates PIV Request, conducts identity proofing, ensures Applicant has completed training and documentation.

• Enrollment OfficialPerforms identity proofing and document gathering for Applicants remote to PCIF.

• RegistrarFinal approval authority for PIV card issuance; ensures ID proofing, background checks and training has been completed.

• PCIF IssuerCreates and issues the PIV card upon Registrar approval.

• Remote IssuerIssues the PIV card to Applicants remote to the PCIF

5

Role Requirements

• Appointed in writing

• Current NACI (or higher) on file

• PIV training completed and certificate forwarded to WRSO

• U.S. Citizens

• Federal employees*

*Note: PCIF and/or Remote Issuers may be federal contractors

6

Acronyms

• COR—Contracting Officer Representative• COTR—Contracting Officer Technical Representative• HSPD—Homeland Security Presidential Directive• NAC—National Agency Check (fingerprint check-plus)• NACI—National Agency Check with Inquiries (full background

investigation)• OPM—Office of Personnel Management (investigative agency)• OSY—Office of Security (HQ, Dept of Commerce)• PCIF—PIV Card Issuing Facility• PIV—Personal Identity Verification• WFMO—Workforce Management Office (HR)• WRSO—Western Region Security Office

7

PIV Documentation

• PIV Request Form

• Security Coversheet for Non-Employees (SCNE)

• Legible copy of identification documents (one must be photo ID issued by federal or state government agency)

• PIV Applicant training certificate

• Proof of prior investigation, OR

• SF85, 85P, or 86 Questionnaire

• OF 306, Declaration for Federal Employment

• Fingerprint cards (FD 258 for non-employees, SF87 for employees)

• Fair Credit Reporting Act Form (for SF85P and SF86 only)

• Current resume (employees only)

8

Procedures--Local

1. Sponsor sends/gives paperwork

2. Applicant fills it out and gives it to Sponsor

3. Sponsor ID-proofs Applicant, checks paperwork, submits packet to Registrar (WRSO)

4. Applicant comes to PCIF (WRSO) for fingerprints, photo

5. Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card

6. PCIF Issuer prepares card

7. Applicant returns to PCIF and signs for PIV card.

9

Procedures--Remote

1. Sponsor fills out PIV Request and sends it to Enrollment Official; sends investigative paperwork to Applicant

2. Applicant fills out investigative paperwork, takes training, and reports to his/her local Enrollment Official

3. Enrollment Official ID-proofs Applicant, takes photo, collects fingerprints, checks paperwork, submits packet to Sponsor

4. Sponsor reviews documentation and submits packet to Registrar (WRSO)

5. Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card

6. PCIF Issuer prepares card and sends it to Remote Issuer

7. Applicant reports to Remote Issuer and signs for PIV card

8. Remote Issuer returns completed original PIV Request Form to Registrar.

10

Short Term Visitors

• Definition

Contractors, guests, and affiliates working on a federal facility for less than six months (180 days)

• Procedures

--Submit fingerprints/fingerprint cards for criminal history check

--Fill out and submit OF 306, Declaration for Federal Employment

11

HSPD-12 Changes

• PIV Card has slightly different look

– NOAA logo replaced by DOC logo– PIV cards will be numbered as follows: “PIV-1 Wnnnnn”

• No same-day PIV cards for new employees and contractors

• Security Worksheet for Non-Employees (SWNE) replaced with memo-format Security Coversheet for Non-Employees (SCNE)

• CD 390 ID and Key Request no longer required for badges; replaced by PIV Request Form and cover sheet

12

Changes Since HSPD-12 Implementation

• I-9 for ID-proofing no longer required

• Fair Credit Reporting Act Form no longer required for SF85s

• Federal supervisors can serve as sponsors for renewing employees

• Bargaining unit employees will utilize old process; obtain six-month badge

• All other renewals will be processed via PIV procedures

13

Common Errors

• PIV Request and SF85 sent without cover sheet– Needed to process investigation or verify investigation is on file with OPM

• Signatures missing on PIV Request Form– Section A (Sponsor)– Section B (Sponsor or Enrollment Official).

• Copies submitted– Send original PIV Request Form and SF85, with original signatures

• SF85 contains numerous errors. Please refer to and use the SF85 Return Checklist to catch the most common errors

• PIV Request Form signed by non-Sponsor or non-Enrollment Official

• Contractor PIV Request Form signed by Sponsor who is not a COR/COTR

• Fingerprint cards smudged; prints pressed not rolled; missing key areas, such as the joint line

14

What the Future Holds

• PIV-2 coming

– Smart card chip and interoperability for physical and logical access– “Smart” features include Public Key Infrastructure encryption and

limited biometrics to reduce/eliminate need for multiple passwords

• Initial implementation October 2006

• Full implementation (only PIV-2 cards issued) by October 2007

• Will require hardware/software and access control systems which are compatible with PIV-2

• 100% of employees, contractors, and long-term guests/affiliates must have completed background investigation on file by October 2007

15

HSPD-12 Points of ContactWestern Region Security Office

• Regional Security Officer/PCIF Manager– Cheryl Wieser, 206-526-6653– Cheryl.L.Wieser@noaa.gov

• HSPD-12 Point of Contact/Registrar– Veronica McCann, Security Specialist, 206-526-6674– Veronica.L.Mccann@noaa.gov

• HSPD-12 Registrar– Joseph Lubin, Security Specialist, 206-526-4317– Joseph.A.Lubin@noaa.gov

• HSPD-12 Registrar– Robert Conley, Security Specialist, 206-526-6429– Robert.H.Conley@noaa.gov

• WRSO Fax, 206-526-4543

16

HSPD-12 Points of ContactDOC Office of Security

• HSPD-12 Program Manager– Ron Martin, Agency Identity Management Official, 202-428-4637– RMartin@doc.gov

• HSPD-12 Management Analyst– Patricia Billeter, PIV Card Applicant Representative, 202-482-5772– PBilleter@doc.gov

• Agency Official for Privacy– Dan Rooney, 202-482-0517

• HSPD-12 Help Desk 202-482-8116

• Training Assistance osy_piv1training@doc.gov

• HSPD-12 Website www.osec.doc.gov/osy (HSPD-12 menu on left)

17

Questions?

18

Presenter Information

Veronica McCann

Western Region Security Office7600 Sand Point Way NE

Seattle, WA 98115

Phone: (206) 526-6674Fax: (206) 526-4543

VMccann@doc.gov or veronica.l.mccann@noaa.gov