Public Trust Information and Navy Enterprise Resource Planning Presented to the Small Business and Industry Outreach In

1. Public Trust Information and Navy Enterprise Resource PlanningPresented to the Small Business and Industry Outreach Initiative (SBIOI)Quarterly SymposiumNelson ArdSPAWAR ATLANTIC Navy ERP Program Manager April 23, 2009 Charleston, SC 

2. 2 Organization of this Brief What is Navy ERP? What do I Need to Work in Navy ERP? User Access Physical Access Authorization Training Frequently Asked Questions Public Trust Background Check SAAR-N Form and Request Information Assurance Training Where to Find More Information

3. 3 Navy Enterprise Resource Planning (Navy ERP) On 1 October 2009, Space and Naval Warfare Systems Center (SPAWAR) ATLANTIC will be implementing a new information system called Navy Enterprise Resource Planning (Navy ERP). This will replace several of our legacy systems. As one of our industry partners, you may have personnel who require access to information that is currently held by a legacy application/systems that is being replaced with Navy ERP. Federal statutes and regulations require procedures to be in place to provide for trusted access to government information systems.

4. 4 Navy Enterprise Resource Planning (Navy ERP) This briefing is intended to familiarize you with the procedures we will use to grant access to Navy ERP. You should pay attention to any additional direction from the SPAWAR Contracting Officer on these requirements. Most of the requirements that follow are not unique to Navy ERP, since Navy ERP follows Navy access requirements.

5. 5

6. 6 Requirements established as of 31 December 2008: Initiate Background Check for Public Trust Positions or hold a Current Clearance DoD Private Key Infrastructure (PKI) Hard Token (CAC Card) Navy System Authorization Access Request (SAAR-N) Complete SPAWAR Information Assurance Training Complete SPAWAR Privacy Program Training NMCI User Account for all Users including Contractors SPAWAR INST 5239.9 requires – see your Government Sponsor Complete Navy ERP Web-Based or Classroom training as your employees are role mapped and scheduled August – September 2009 or October – December 2009 What do I Need to Work in Navy ERP? User Agreement Part of the SPAWAR SAAR Form Signed User Agreement PKI digital signature is acceptable Non Disclosure Agreement Part of the SPAWAR SAAR Form Signed Non Disclosure Agreement PKI digital signature is acceptable IA Awareness Training Evidence of Completion of Information Assurance Awareness training Initial training Refresher training required annually User Agreement Part of the SPAWAR SAAR Form Signed User Agreement PKI digital signature is acceptable Non Disclosure Agreement Part of the SPAWAR SAAR Form Signed Non Disclosure Agreement PKI digital signature is acceptable IA Awareness Training Evidence of Completion of Information Assurance Awareness training Initial training Refresher training required annually

7. 7 Navy ERP User Access Requirements U. S. Citizenship Foreign Nationals (with separate case by case approval) Completion of a successfully adjudicated background investigation. Standard Form 85P, Questionnaire for Public Trust Positions, for Contractors Without Security Clearances. For Contractors Requiring Security Clearances, submit to OPM through the Electronic Questionnaire for Investigative Processing (E-QUIP) Please plan ahead if you are bringing new people aboard. Citizenship U. S. Citizen Foreign National - may be granted access on a case-by-case basis with approval from the Navy Foreign Disclosure Officer Background Investigation Completion of a successfully adjudicated background investigation SF85P for contractors without security clearances SF86 for all Government and contractors with security clearances Updated investigations are required periodically Interim access may be granted if initial review of investigative package and interview reveals no derogatory information Citizenship U. S. Citizen Foreign National - may be granted access on a case-by-case basis with approval from the Navy Foreign Disclosure Officer Background Investigation Completion of a successfully adjudicated background investigation SF85P for contractors without security clearances SF86 for all Government and contractors with security clearances Updated investigations are required periodically Interim access may be granted if initial review of investigative package and interview reveals no derogatory information

8. 8 Navy ERP User Access RequirementsPart 1: Physical Access Complete two forms through your Facility Security Officer (FSO): CNRSE 5200.1 Form 1 Activity Pass Information CNRSE 5200.2 Form 2 Request for Employee Access through your SPAWAR Government Sponsor (Supervisor/Branch Head or above) Signing these forms gives base police authorization to conduct a criminal background check. Completion of the application is voluntary; however, failure to complete the forms will result in denied access. Complete one form through your SPAWAR Government Sponsor SPAWAR Security Agreement for non-SPAWAR Personnel SPAWARSYSLANT Form 5512_3 Supervisor/Branch Head or above signature required Where do I find this Security Agreement form?

9. 9 Navy ERP User Access RequirementsPart 2: Authorization Navy System Authorization Access Request (SAAR-N) OPNAV 5239.14. You only need to complete this form once for access to any SPAWAR system or network. This form requires signatures on several pages. For complete instructions (and examples) see the SPAWAR Systems Center ATLANTIC home page on Collaboration and Execution (CnE). Where do I find this SAAR-N form? DoD Private Key Infrastructure (PKI) Hard Token (CAC Card)

10. 10 Navy ERP User Access Requirements Part 3: Training Command Information Assurance Awareness training (IA Training) for 2009 This is certified and tracked in our local Annual Training module You must submit your certificate with your SAAR-N form Where do I find this training? 2008 Privacy Program Training The individual’s certificate sheets are printed, signed, and faxed to the Contracting Officers Representative Completion of Navy ERP Role Based Training given at SPAWAR Systems Center ATLANTIC locations August – September 2009 or October – December 2009 These are registered and tracked in our instance of Navy ERP Where do I find this training?

11. 11 SPAWAR Letter to Industry Partners Timeframe now to 15 Dec Be Proactive: Review your task completion dates Review for required funding increments Contact your Contracting Officer’s Representative (COR) and Contracting Officer as needed Provide timely invoices Seek authorization to ship early Citizenship U. S. Citizen Foreign National - may be granted access on a case-by-case basis with approval from the Navy Foreign Disclosure Officer Background Investigation Completion of a successfully adjudicated background investigation SF85P for contractors without security clearances SF86 for all Government and contractors with security clearances Updated investigations are required periodically Interim access may be granted if initial review of investigative package and interview reveals no derogatory information User Agreement Part of the SPAWAR SAAR Form Signed User Agreement PKI digital signature is acceptable Non Disclosure Agreement Part of the SPAWAR SAAR Form Signed Non Disclosure Agreement PKI digital signature is acceptable IA Awareness Training Evidence of Completion of Information Assurance Awareness training Initial training Refresher training required annuallyCitizenship U. S. Citizen Foreign National - may be granted access on a case-by-case basis with approval from the Navy Foreign Disclosure Officer Background Investigation Completion of a successfully adjudicated background investigation SF85P for contractors without security clearances SF86 for all Government and contractors with security clearances Updated investigations are required periodically Interim access may be granted if initial review of investigative package and interview reveals no derogatory information User Agreement Part of the SPAWAR SAAR Form Signed User Agreement PKI digital signature is acceptable Non Disclosure Agreement Part of the SPAWAR SAAR Form Signed Non Disclosure Agreement PKI digital signature is acceptable IA Awareness Training Evidence of Completion of Information Assurance Awareness training Initial training Refresher training required annually

12. 12 SPAWAR Letter to Industry Partners SPAWAR e-Commerce Website https://e-commerce.sscno.nmci.navy.mil

13. Frequently Asked Questions

14. 14 Frequently Asked Questions:Suitability for Public Trust Do I need to have a clearance to work in Navy ERP? No. If your employee does not currently hold a security clearance, you or your Facilities Security Officer must have the employee initiate a Questionnaire for Public Trust Positions (SF 85P) through OPM.

15. 15 Frequently Asked Questions: System Authorization Access Request (SAAR) For complete instructions (and examples) see the SPAWAR Systems Center ATLANTIC home page on Collaboration and Execution (CnE). Where do I find the Navy System Authorization Access Request (SAAR-N) OPNAV 5239.14? On Collaboration and Execution (CnE) Navigate to the SSC ATLANTIC button at top, then click on the Organization button at left on the page that opens. Locate the Corporate Operations 8.0.0 link, click on it, then Information Assurance Management 8.2.4 on that page. The SAAR-N form link is at left on the next page. Use the Contractor Employee SAAR-N Form Example at bottom Back

16. 16 Frequently Asked Questions:Information Assurance Training To locate SPAWAR Mandatory Information Assurance (IA) Training On Collaboration and Execution (CnE) Navigate to the SSC ATLANTIC button at top, then click on the Organization button at left on the page that opens. Locate the Total Force Management 8.1.0 link, click on it, then locate the Mandatory Training link on that page. The Information Assurance link on the page that follows leads to the Annual IA Awareness training. The deadline for existing users is 1 June 2009. Back

17. 17 Frequently Asked Questions:2008 PRIVACY PROGRAM TRAINING In accordance with ALNAV 070/07, Contractor employees are required to complete Privacy Program Training by 31 December. This training is an annual requirement. On Collaboration and Execution (CnE) Navigate to the SSC ATLANTIC button at top, then click on the Organization button at left on the page that opens. Locate the Total Force Management 8.1.0 link, click on it, then locate the Privacy Training link on that page. Locate the 2008 Privacy Training link on the page that follows and follow it. Once you have completed the CBT, slide #39 of the CBT titled “2008 Privacy Training,” LOOK FOR AND CLICK/SELECT THE GREEN TEXT WORDS "CERTIFICATION OF COMPLETION". Print your certificate, sign it and send it to your Contracting Officer Representative (COR). If you do not know who is the COR on your contract, please check with your program manager or supervisor. Questions related to the two "Privacy Act" CBTs should be directed to the Command's Privacy Officer, Andy Rosenbaum at 843-218-4390 or james.a.rosenbaum@navy.mil. Back

18. 18 Collaboration and Execution Navigation To locate Security forms: On Collaboration and Execution (CnE) Navigate to the SSC ATLANTIC button at top, then click on the Organization button at left on the page that opens. Locate the Corporate Operations 8.0.0 link, click on it, then Security Programs 8.3.3 on that page. CNRSEINST 5530 1 - Navy Region Southeast Installation Access Control policy link is on that page. Follow the Instructions and Policies link at left and locate the Security Agreement for Non-SPAWAR Personnel link below to open the form you need. Back

19. 19 Questions??

20. 20

21. THANK YOU