# Presentation: 705260

## 
Homeland Security Presidential
Directive 12 (HSPD-12)
Policies & Procedures

Western Region Security Office
March 7, 2006 

**Homeland Security Presidential**
**Directive 12 (HSPD-12)**
- Policies & Procedures
- Western Region Security Office
- March 7, 2006

- U.S. Department of Commerce
- Office Of Security (OSY)

- Security is Everyone's Responsibility

## Definition

**Definition**

- HSPD-12 is a government-wide standard for secure and reliable identification for federal employees and contractors.
- It directs the implementation of a new standardized badging process, which is designed to enhance security, reduce identity fraud, and protect the personal privacy of those issued government identification.
- Implemented October 2005.

- Security is Everyone's Responsibility

## Program Requirements

**Program Requirements**

- Everyone issued an ID badge must have a favorable background investigation, including FBI fingerprint check; for most people, this will mean a National Agency Check with Inquiries (NACI).
- All personnel must be “identity-proofed,” that is, they must present two forms of identification to verify their identity.
- No one person can be the sole official that requests, authorizes, and issues a badge.

- Security is Everyone's Responsibility

## Roles

**Roles**

**Applicant**
- 	The individual to whom a PIV card will be issued.
**Sponsor**
- 	Validates Applicant’s requirement for a PIV card, initiates PIV Request, conducts identity proofing, ensures Applicant has completed training and documentation.
**Enrollment Official**
- 	Performs identity proofing and document gathering for Applicants remote to PCIF.
**Registrar**
- 	Final approval authority for PIV card issuance; ensures ID proofing, background checks and training has been completed.
**PCIF Issuer**
- 	Creates and issues the PIV card upon Registrar approval.
**Remote Issuer**
- 	Issues the PIV card to Applicants remote to the PCIF

- Security is Everyone's Responsibility

## Role Requirements 

**Role Requirements**** **

- Appointed in writing
- Current NACI (or higher) on file
- PIV training completed and certificate forwarded to WRSO
- U.S. Citizens
- Federal employees*
- *Note:  PCIF and/or Remote Issuers may be federal contractors

- Security is Everyone's Responsibility

## Acronyms 

**Acronyms**** **

- COR—Contracting Officer Representative
- COTR—Contracting Officer Technical Representative
- HSPD—Homeland Security Presidential Directive
- NAC—National Agency Check (fingerprint check-plus)
- NACI—National Agency Check with Inquiries (full background investigation)
- OPM—Office of Personnel Management (investigative agency)
- OSY—Office of Security (HQ, Dept of Commerce)
- PCIF—PIV Card Issuing Facility
- PIV—Personal Identity Verification
- WFMO—Workforce Management Office (HR)
- WRSO—Western Region Security Office

- Security is Everyone's Responsibility

## PIV Documentation 

**PIV Documentation**** **

- PIV Request Form
- Security Coversheet for Non-Employees (SCNE)
- Legible copy of identification documents (one must be photo ID issued by federal or state government agency)
- PIV Applicant training certificate
- Proof of prior investigation, OR
- SF85, 85P, or 86 Questionnaire
- OF 306, Declaration for Federal Employment
- Fingerprint cards (FD 258 for non-employees, SF87 for employees)
- Fair Credit Reporting Act Form (for SF85P and SF86 only)
- Current resume (employees only)

- Security is Everyone's Responsibility

## Procedures--Local 

**Procedures--Local**** **

- Sponsor sends/gives paperwork
- Applicant fills it out and gives it to Sponsor
- Sponsor ID-proofs Applicant, checks paperwork, submits packet to Registrar (WRSO)
- Applicant comes to PCIF (WRSO) for fingerprints, photo
- Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card
- PCIF Issuer prepares card
- Applicant returns to PCIF and signs for PIV card.

- Security is Everyone's Responsibility

## Procedures--Remote 

**Procedures--Remote**** **

- Sponsor fills out PIV Request and sends it to Enrollment Official; sends investigative paperwork to Applicant
- Applicant fills out investigative paperwork, takes training, and reports to his/her local Enrollment Official
- Enrollment Official ID-proofs Applicant, takes photo, collects fingerprints, checks paperwork, submits packet to Sponsor
- Sponsor reviews documentation and submits packet to Registrar (WRSO)
- Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card
- PCIF Issuer prepares card and sends it to Remote Issuer
- Applicant reports to Remote Issuer and signs for PIV card
- Remote Issuer returns completed original PIV Request Form to Registrar.

- Security is Everyone's Responsibility

## Short Term Visitors

**Short Term Visitors**

**Definition**
- 	Contractors, guests, and affiliates working on a federal facility for less than six months (180 days)
**Procedures**
- 	--Submit fingerprints/fingerprint cards for criminal history check
- 	--Fill out and submit OF 306, Declaration for Federal Employment

- Security is Everyone's Responsibility

## HSPD-12 Changes 

**HSPD-12 Changes**** **

- PIV Card has slightly different look
- NOAA logo replaced by DOC logo
- PIV cards will be numbered as follows:  “PIV-1 Wnnnnn”
- No same-day PIV cards for new employees and contractors
- Security Worksheet for Non-Employees (SWNE) replaced with memo-format Security Coversheet for Non-Employees (SCNE)
- CD 390 ID and Key Request no longer required for badges; replaced by PIV Request Form and cover sheet

- Security is Everyone's Responsibility

## Changes Since HSPD-12 Implementation

**Changes Since HSPD-12 Implementation**

- I-9 for ID-proofing no longer required
- Fair Credit Reporting Act Form no longer required for SF85s
- Federal supervisors can serve as sponsors for renewing employees
- All other renewals will be processed via PIV procedures

- Security is Everyone's Responsibility

## Common Errors 

**Common Errors**** **

- PIV Request and SF85 sent without cover sheet
- Needed to process investigation or verify investigation is on file with OPM
- Signatures missing on PIV Request Form
- Section A (Sponsor)
- Section B (Sponsor or Enrollment Official).
- Copies submitted
- Send original PIV Request Form and SF85, with original signatures
- SF85 contains numerous errors.  Please refer to and use the SF85 Return Checklist to catch the most common errors
- PIV Request Form signed by non-Sponsor or non-Enrollment Official
- Contractor PIV Request Form signed by Sponsor who is not a COR/COTR
- Fingerprint cards smudged; prints pressed not rolled; missing key areas, such as the joint line

- Security is Everyone's Responsibility

## What the Future Holds 

**What the Future Holds**** **

- PIV-2 coming
- Smart card chip and interoperability for physical and logical access
- “Smart” features include Public Key Infrastructure encryption and limited biometrics to reduce/eliminate need for multiple passwords
- Initial implementation October 2006
- Full implementation (only PIV-2 cards issued) by October 2007
- Will require hardware/software and access control systems which are compatible with PIV-2
- 100% of employees, contractors, and long-term guests/affiliates must have completed background investigation on file by October 2007

- Security is Everyone's Responsibility

## HSPD-12 Points of ContactWestern Region Security Office

**HSPD-12 Points of Contact****Western Region Security Office**

- Regional Security Officer/PCIF Manager
- Cheryl Wieser, 206-526-6653
- _CWieser@doc.gov_
- HSPD-12 Point of Contact/Registrar
- Jason Haack, Security Specialist, 206-526-6006
- _JHaack@doc.gov_
- HSPD-12 Registrar
- Joseph Lubin, Security Specialist, 206-526-4317
- _JLubin@doc.gov_
- HSPD-12 Registrar
- Michael Shearin, Security Specialist, 206-526-6674
- _MShearin@doc.gov_
- WRSO Fax, 206-526-4543

- Security is Everyone's Responsibility

## HSPD-12 Points of ContactDOC Office of Security

**HSPD-12 Points of Contact****DOC Office of Security**

- HSPD-12 Program Manager
- Pat Billiter, Agency Identity Management Official, 202-428-4637
- _PBilliter@doc.gov_
- Agency Official for Privacy
- Dan Rooney, 202-482-0517
- HSPD-12 Help Desk	202-482-8116
- Training Assistance	_osy_piv1training@doc.gov_
- HSPD-12 Website	_www.osec.doc.gov/osy_ (HSPD-12 menu on left)

- Security is Everyone's Responsibility

## 
Questions?

- Questions?

- Security is Everyone's Responsibility