**HSPD-12 REPORTING TEMPLATE FOR SEPTEMBER 2006 IMPLEMENTATION PLAN
UPDATE**

<table>
<colgroup>
<col style="width: 19%" />
<col style="width: 18%" />
<col style="width: 1%" />
<col style="width: 9%" />
<col style="width: 8%" />
<col style="width: 0%" />
<col style="width: 1%" />
<col style="width: 0%" />
<col style="width: 3%" />
<col style="width: 0%" />
<col style="width: 0%" />
<col style="width: 2%" />
<col style="width: 0%" />
<col style="width: 0%" />
<col style="width: 3%" />
<col style="width: 0%" />
<col style="width: 1%" />
<col style="width: 3%" />
<col style="width: 0%" />
<col style="width: 0%" />
<col style="width: 0%" />
<col style="width: 1%" />
<col style="width: 2%" />
<col style="width: 2%" />
<col style="width: 0%" />
<col style="width: 3%" />
<col style="width: 1%" />
<col style="width: 0%" />
<col style="width: 2%" />
<col style="width: 9%" />
</colgroup>
<tbody>
<tr class="odd">
<td colspan="30"><h4 id="i.-general-information">I. General
Information</h4></td>
</tr>
<tr class="even">
<td colspan="30">Submission Date:</td>
</tr>
<tr class="odd">
<td colspan="30">Agency/Department Name:</td>
</tr>
<tr class="even">
<td colspan="30">Agency HSPD-12 Point of Contact:</td>
</tr>
<tr class="odd">
<td colspan="2">Phone Number:</td>
<td colspan="28">Email:</td>
</tr>
<tr class="even">
<td colspan="30"><h4 id="section"></h4></td>
</tr>
<tr class="odd">
<td colspan="30"><h4 id="ii.-timeline">II. Timeline</h4></td>
</tr>
<tr class="even">
<td colspan="30">1) Planned date for compliance with Part 1, Personal
Identity Verification (PIV) I:</td>
</tr>
<tr class="odd">
<td colspan="5" rowspan="2">2) Agency is undergoing a full migration
(e.g. has no existing electronic personal identity verification
system)</td>
<td colspan="8"><strong>Yes</strong></td>
<td colspan="6"><strong>No</strong></td>
<td colspan="11" rowspan="2">Comments:</td>
</tr>
<tr class="even">
<td colspan="8"></td>
<td colspan="6"></td>
</tr>
<tr class="odd">
<td colspan="5">3) Agency is migrating a legacy system (e.g. has a
deployed/or is in the process of deploying electronic identity
credentials; i.e. smart cards)</td>
<td colspan="8"><strong>Yes</strong></td>
<td colspan="6"><strong>No</strong></td>
<td colspan="11">Comments:</td>
</tr>
<tr class="even">
<td colspan="30">4) Planned Date to implement Part 2, PIV II (i.e.
starting to issue compliant cards):</td>
</tr>
<tr class="odd">
<td colspan="30">5) Date for full compliance with HSPD-12 (All
employees/contractors using a compliant card):</td>
</tr>
<tr class="even">
<td colspan="30"><h4 id="section-1"></h4></td>
</tr>
<tr class="odd">
<td colspan="30"><h4
id="iii.-agency-implementation-of-fips-201-part-1-piv-i">III. Agency
Implementation of FIPS 201 Part 1: PIV I</h4></td>
</tr>
<tr class="even">
<td colspan="30"><p><strong>Scale: 1 – Not started 2 – Planning in
progress 3 – Planning complete</strong></p>
<p><strong>4 – Implementation in progress 5 – Implementation
complete</strong></p></td>
</tr>
<tr class="odd">
<td colspan="6">Instructions: Place an “x” in the column that
corresponds to your agency’s current environment.</td>
<td colspan="5">1</td>
<td colspan="5">2</td>
<td colspan="5">3</td>
<td colspan="4">4</td>
<td colspan="3">5</td>
<td colspan="2">Planned completion date</td>
</tr>
<tr class="even">
<td colspan="6"><strong>1) Identification issued based on sound criteria
for verifying an individual’s identity</strong></td>
<td colspan="24"></td>
</tr>
<tr class="odd">
<td colspan="6">a) Approved credential issuance and maintenance process,
as defined in FIPS 201 section 2.0.</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="2"></td>
</tr>
<tr class="even">
<td colspan="6">b) National Agency Check with Inquiries (NACI) or
equivalent (e.g. ANACI) is initiated prior to credential issuance.</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="2"></td>
</tr>
<tr class="odd">
<td colspan="6">c) Controls are in place to ensure all individuals to
whom your agency ID is issued are the same intended
applicants/recipients, approved by the appropriate authority.</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="2"></td>
</tr>
<tr class="even">
<td colspan="6">d) Training is provided for all roles associated with
your approved identity proofing and issuance processes.</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="2"></td>
</tr>
<tr class="odd">
<td colspan="30">Comments:</td>
</tr>
<tr class="even">
<td colspan="30"><strong>2) Number of individuals requiring background
checks in accordance with PIV I requirements (Note: Agency responses to
Question 2 will be provided to OPM and DOJ-FBI for planning
purposes.)</strong></td>
</tr>
<tr class="odd">
<td colspan="4"></td>
<td colspan="5"><strong>FY 2007</strong></td>
<td colspan="13"><strong>FY 2008</strong></td>
<td colspan="8"><strong>Comments:</strong></td>
</tr>
<tr class="even">
<td colspan="4">a) Number of federal employees:</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="odd">
<td colspan="4">b) Number of contractors:</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="even">
<td colspan="4">c) Number of other types of individuals (e.g.,
volunteers, visiting scientists, etc.):</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="odd">
<td colspan="4">d) Number of federal employees requiring an FBI National
Criminal History (Fingerprint) Check:</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="even">
<td colspan="4">e) Number of contractors requiring an FBI National
Criminal History (Fingerprint) Check:</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="odd">
<td colspan="4">f) Number of other types of individuals (e.g.
volunteers) requiring an FBI National Criminal History (Fingerprint)
Check:</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="even">
<td colspan="4">g) Number of federal employees requiring a NACI (or
equivalent) that have not previously undergone a NACI:</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="odd">
<td colspan="4">h) Number of federal employees requiring an updated NACI
(or equivalent):</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="even">
<td colspan="4">i) Number of contractors requiring a NACI (or
equivalent) that have not previously undergone a NACI:</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="odd">
<td colspan="4">j) Number of contractors requiring an updated NACI (or
equivalent):</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="even">
<td colspan="4">k) Number of other types of individuals (e.g.
volunteers) requiring a NACI (or equivalent) that have not previously
undergone a NACI:</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="odd">
<td colspan="4">l) Number of other types of individuals (e.g.
volunteers) requiring an updated NACI (or equivalent):</td>
<td colspan="5"></td>
<td colspan="13"></td>
<td colspan="8"></td>
</tr>
<tr class="even">
<td colspan="30"></td>
</tr>
<tr class="odd">
<td colspan="30"><p
id="iv.-agency-implementation-fips-201-part-2-piv-ii"
class="heading"><strong>IV. Agency Implementation FIPS 201 Part 2: PIV
II</strong></p></td>
</tr>
<tr class="even">
<td colspan="30"><p><strong>Scale: 1 – Not started 2 – Planning in
progress 3 – Planning complete</strong></p>
<p><strong>4 – Implementation in progress 5 – Implementation
complete</strong></p></td>
</tr>
<tr class="odd">
<td colspan="5" rowspan="2"><strong>1) Do you have an implementation
plan developed to meet the FIPS 201 PIV II technology card
specification?</strong></td>
<td colspan="8"><strong>Yes</strong></td>
<td colspan="6"><strong>No</strong></td>
<td colspan="11" rowspan="2">If no, when?</td>
</tr>
<tr class="even">
<td colspan="8"></td>
<td colspan="6"></td>
</tr>
<tr class="odd">
<td colspan="30">a) If yes, describe your high level milestones.</td>
</tr>
<tr class="even">
<td colspan="5" rowspan="2"><strong>2) Is your agency participating in
the HSPD-12 Shared Services program managed by GSA?</strong></td>
<td colspan="9"><strong>Yes</strong></td>
<td colspan="4"><strong>No</strong></td>
<td colspan="12" rowspan="2">Comments:</td>
</tr>
<tr class="odd">
<td colspan="9"></td>
<td colspan="4"></td>
</tr>
<tr class="even">
<td colspan="30">a) If yes, indicate the services your agency has
acquired or intends to acquire through the GSA HSPD-12 Managed Service
Office.</td>
</tr>
<tr class="odd">
<td>Enrollment</td>
<td colspan="2">Systems Infrastructure (IDMS/CMS)</td>
<td colspan="4">Card Printing</td>
<td colspan="16">Finalization</td>
<td colspan="7">End-to-End Managed Service</td>
</tr>
<tr class="even">
<td></td>
<td colspan="2"></td>
<td colspan="4"></td>
<td colspan="16"></td>
<td colspan="7"></td>
</tr>
<tr class="odd">
<td colspan="5" rowspan="2">b) Does your agency have a signed agreement
in place with the GSA Managed Service Office?</td>
<td colspan="7"><strong>Yes</strong></td>
<td colspan="6"><strong>No</strong></td>
<td colspan="12" rowspan="2">Comments:</td>
</tr>
<tr class="even">
<td colspan="7"></td>
<td colspan="6"></td>
</tr>
<tr class="odd">
<td colspan="23" rowspan="2">c) Is your agency receiving HSPD-12
services from a provider other than the GSA Managed Service Office (e.g.
Department of Interior’s National Business Center)?</td>
<td colspan="6"><strong>Yes</strong></td>
<td><strong>No</strong></td>
</tr>
<tr class="even">
<td colspan="6"></td>
<td></td>
</tr>
<tr class="odd">
<td colspan="8">d) If you answered “Yes” to 2(c) then please indicate
the name of the agency:</td>
<td colspan="22"></td>
</tr>
<tr class="even">
<td colspan="30">Comments:</td>
</tr>
<tr class="odd">
<td colspan="30"></td>
</tr>
<tr class="even">
<td colspan="6">Note: Agencies receiving end-to-end HSPD-12 managed
services offered by the GSA HSPD-12 Managed Service Office may skip
Questions 3(a) and (b)</td>
<td colspan="5">1</td>
<td colspan="5">2</td>
<td colspan="5">3</td>
<td colspan="4">4</td>
<td colspan="3">5</td>
<td colspan="2">Planned completion date</td>
</tr>
<tr class="odd">
<td colspan="6"><strong>3) Identification that is issued only by
providers whose reliability has been established by an official
accreditation process</strong></td>
<td colspan="24"></td>
</tr>
<tr class="even">
<td colspan="6">a) PIV credentials are issued through systems and
providers whose reliability has been established by the Agency, and
documented and approved in writing; i.e., certified and accredited per
NIST SP 800-37 (for IT systems) and NIST SP 800-79 (for the PIV
process).</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="2"></td>
</tr>
<tr class="odd">
<td colspan="6">b) Providers (services and/or systems) of components in
the credentialing system comply with all applicable Federal Acquisition
Regulations (FAR) or other applicable purchasing authority.</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="2"></td>
</tr>
<tr class="even">
<td colspan="30">Comments:</td>
</tr>
<tr class="odd">
<td colspan="30"></td>
</tr>
<tr class="even">
<td colspan="6">Note: Agencies receiving end-to-end HSPD-12 managed
services through the GSA HSPD-12 Managed Service Office may skip
Question 4(a)</td>
<td colspan="5">1</td>
<td colspan="5">2</td>
<td colspan="5">3</td>
<td colspan="4">4</td>
<td colspan="3">5</td>
<td colspan="2">Planned completion date</td>
</tr>
<tr class="odd">
<td colspan="6"><strong>4) Identification that is strongly resistant to
identity fraud, tampering, counterfeiting, and terrorist
exploitation</strong></td>
<td colspan="24"></td>
</tr>
<tr class="even">
<td colspan="6">a) All agency IDs issued with FIPS 201 visible external
security features.</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="2"></td>
</tr>
<tr class="odd">
<td colspan="30">Comments:</td>
</tr>
<tr class="even">
<td colspan="30"></td>
</tr>
<tr class="odd">
<td colspan="6">Note: Agencies receiving end-to-end HSPD-12 managed
services through the GSA HSPD-12 Managed Service Office may skip
Question 5(a)</td>
<td colspan="5">1</td>
<td colspan="5">2</td>
<td colspan="5">3</td>
<td colspan="4">4</td>
<td colspan="3">5</td>
<td colspan="2">Planned completion date</td>
</tr>
<tr class="even">
<td colspan="6"><strong>5) Identification that can be rapidly
authenticated electronically</strong></td>
<td colspan="24"></td>
</tr>
<tr class="odd">
<td colspan="6">a) All agency IDs are issued with FIPS 201 electronic
security features.</td>
<td colspan="5"><mark></mark></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="2"></td>
</tr>
<tr class="even">
<td colspan="6">b) Agency employees and contractors routinely use these
electronic security features to gain access to facilities and/or systems
(or “to authenticate identity”).</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="2"></td>
</tr>
<tr class="odd">
<td colspan="30">Comments:</td>
</tr>
<tr class="even">
<td colspan="30"></td>
</tr>
<tr class="odd">
<td colspan="5">Note: Agencies receiving end-to-end HSPD-12 managed
services through the GSA HSPD-12 Managed Service Office may skip
Questions 6(a) and (b)</td>
<td colspan="5">1</td>
<td colspan="5">2</td>
<td colspan="5">3</td>
<td colspan="4">4</td>
<td colspan="3">5</td>
<td colspan="3"><p>Planned</p>
<p>completion date</p></td>
</tr>
<tr class="even">
<td colspan="5"><strong>6) Using PIV credential for physical and logical
access to Federally controlled facilities and information
systems</strong></td>
<td colspan="25"></td>
</tr>
<tr class="odd">
<td colspan="5">a) All credentials issued by your agency contain a
fingerprint minutiae template biometric, and can be electronically
authenticated to the holder using a biometric match.</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="3"></td>
</tr>
<tr class="even">
<td colspan="5">b) All credentials issued by your agency have the
capability to be electronically verified to determine the
employee/contractor is in good standing (i.e., the credential has not
been revoked).</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="3"></td>
</tr>
<tr class="odd">
<td colspan="5">c) My agency will authenticate another agency’s FIPS 201
compliant credentials for access to agency’s facilities.</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="3"></td>
</tr>
<tr class="even">
<td colspan="5">d) My agency will authenticate another agency’s FIPS 201
compliant credentials for logical access to an information system (where
necessary).</td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="5"></td>
<td colspan="4"></td>
<td colspan="3"></td>
<td colspan="3"></td>
</tr>
<tr class="odd">
<td colspan="5" rowspan="2">e) Does your agency have a documented plan
for phasing in physical and logical access controls (PACS/LACS)?</td>
<td colspan="12"><strong>Yes</strong></td>
<td colspan="9"><strong>No</strong></td>
<td colspan="4"><strong>Planned completion date</strong></td>
</tr>
<tr class="even">
<td colspan="12"></td>
<td colspan="9"></td>
<td colspan="4"></td>
</tr>
<tr class="odd">
<td colspan="30">Comments:</td>
</tr>
</tbody>
</table>

+-----------------------------------------+---+---+---+---+---+---+---+-------+
| #### V. Security and Privacy            |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| **Scale: 1 -- Not started 2 -- Planning |   |   |   |   |   |   |   |       |
| in progress 3 --** **Planning           |   |   |   |   |   |   |   |       |
| complete**                              |   |   |   |   |   |   |   |       |
|                                         |   |   |   |   |   |   |   |       |
| **4 -- Implementation in progress 5 --  |   |   |   |   |   |   |   |       |
| Implementation complete**               |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| **1) Provide the name of the individual | N |   |   |   |   |   |   |       |
| responsible for privacy matters in      | a |   |   |   |   |   |   |       |
| implementing HSPD-12.**                 | m |   |   |   |   |   |   |       |
|                                         | e |   |   |   |   |   |   |       |
|                                         | : |   |   |   |   |   |   |       |
|                                         |   |   |   |   |   |   |   |       |
|                                         | T |   |   |   |   |   |   |       |
|                                         | i |   |   |   |   |   |   |       |
|                                         | t |   |   |   |   |   |   |       |
|                                         | l |   |   |   |   |   |   |       |
|                                         | e |   |   |   |   |   |   |       |
|                                         | : |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
|                                         |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
|                                         | 1 | 2 |   | 3 |   | 4 | 5 | A     |
|                                         |   |   |   |   |   |   |   | ntici |
|                                         |   |   |   |   |   |   |   | pated |
|                                         |   |   |   |   |   |   |   | compl |
|                                         |   |   |   |   |   |   |   | etion |
|                                         |   |   |   |   |   |   |   | date  |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| **2) Agency meets all security and      |   |   |   |   |   |   |   |       |
| privacy control objectives**            |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| a\) Ensures personal information        |   |   |   |   |   |   |   |       |
| contained in Privacy Act systems of     |   |   |   |   |   |   |   |       |
| records related to HSPD-12 are handled  |   |   |   |   |   |   |   |       |
| in a manner consistent with the Privacy |   |   |   |   |   |   |   |       |
| Act of 1974.                            |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| b\) Has completed a comprehensive       |   |   |   |   |   |   |   |       |
| privacy impact assessment (PIA) for the |   |   |   |   |   |   |   |       |
| IT systems used to implement HSPD-12,   |   |   |   |   |   |   |   |       |
| per OMB Memo 03-22.                     |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| c\) Has updated agency system of        |   |   |   |   |   |   |   |       |
| records notice (related to HSPD-12) to  |   |   |   |   |   |   |   |       |
| reflect any changes in the disclosure   |   |   |   |   |   |   |   |       |
| of information to other Federal         |   |   |   |   |   |   |   |       |
| agencies (i.e. routine uses).           |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| d\) Is collecting information to        |   |   |   |   |   |   |   |       |
| conduct background checks with OMB      |   |   |   |   |   |   |   |       |
| approval under the Paperwork Reduction  |   |   |   |   |   |   |   |       |
| Act (where appropriate).                |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| e\) Identification privacy policy is    |   |   |   |   |   |   |   |       |
| developed, implemented, and posted in   |   |   |   |   |   |   |   |       |
| appropriate locations (e.g., agency     |   |   |   |   |   |   |   |       |
| intranet site, human resources offices, |   |   |   |   |   |   |   |       |
| regional offices, etc.).                |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| Comments:                               |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
|                                         |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| #                                       |   |   |   |   |   |   |   |       |
| ### VI. Special Security Risk Provision |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| 1\) Agency is planning to issue         | * |   | * |   | I |   |   |       |
| credentials under the special security  | * |   | * |   | f |   |   |       |
| risk provision.                         | Y |   | N |   | y |   |   |       |
|                                         | e |   | o |   | e |   |   |       |
|                                         | s |   | * |   | s |   |   |       |
|                                         | * |   | * |   | , |   |   |       |
|                                         | * |   |   |   | h |   |   |       |
|                                         |   |   |   |   | o |   |   |       |
|                                         |   |   |   |   | w |   |   |       |
|                                         |   |   |   |   | m |   |   |       |
|                                         |   |   |   |   | a |   |   |       |
|                                         |   |   |   |   | n |   |   |       |
|                                         |   |   |   |   | y |   |   |       |
|                                         |   |   |   |   | ? |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
|                                         |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| ####  {#section-2}                      |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| #### VII. Status                        |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
|                                         | C |   |   |   | I |   |   |       |
|                                         | o |   |   |   | f |   |   |       |
|                                         | m |   |   |   | N |   |   |       |
|                                         | p |   |   |   | o |   |   |       |
|                                         | l |   |   |   | , |   |   |       |
|                                         | e |   |   |   | w |   |   |       |
|                                         | t |   |   |   | h |   |   |       |
|                                         | e |   |   |   | e |   |   |       |
|                                         |   |   |   |   | n |   |   |       |
|                                         |   |   |   |   | ? |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| 1\) On October 27, 2005 my agency was   | * |   | * |   |   |   |   |       |
| compliant with Part 1 of the Standard   | * |   | * |   |   |   |   |       |
| (i.e., process was approved by the      | Y |   | N |   |   |   |   |       |
| Agency Head and the agency has          | e |   | o |   |   |   |   |       |
| implemented the FIPS 201 compliant      | s |   | * |   |   |   |   |       |
| enrollment and issuance process)        | * |   | * |   |   |   |   |       |
|                                         | * |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
|                                         |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| 2\) On October 27, 2006 my agency will  | * |   | * |   |   |   |   |       |
| be compliant with Part 2 of the         | * |   | * |   |   |   |   |       |
| Standard. (i.e., will begin issuing and | Y |   | N |   |   |   |   |       |
| utilizing FIPS 201 compliant            | e |   | o |   |   |   |   |       |
| credentials)                            | s |   | * |   |   |   |   |       |
|                                         | * |   | * |   |   |   |   |       |
|                                         | * |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
|                                         |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| Name:                                   |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+
| Title:                                  |   |   |   |   |   |   |   |       |
+-----------------------------------------+---+---+---+---+---+---+---+-------+

#  {#section-3}