Homeland Security Presidential Directive 12 (HSPD-12) Policies & Procedures

1. Homeland Security Presidential Directive 12 (HSPD-12) Policies & Procedures Western Region Security Office March 7, 2006 U.S. Department of Commerce Office Of Security (OSY) Security is Everyone's Responsibility

2. Definition • HSPD-12 is a government-wide standard for secure and reliable identification for federal employees and contractors. • It directs the implementation of a new standardized badging process, which is designed to enhance security, reduce identity fraud, and protect the personal privacy of those issued government identification. • Implemented October 2005. Security is Everyone's Responsibility

3. Program Requirements • Everyone issued an ID badge must have a favorable background investigation, including FBI fingerprint check; for most people, this will mean a National Agency Check with Inquiries (NACI). • All personnel must be “identity-proofed,” that is, they must present two forms of identification to verify their identity. • No one person can be the sole official that requests, authorizes, and issues a badge. Security is Everyone's Responsibility

4. Roles • Applicant The individual to whom a PIV card will be issued. • Sponsor Validates Applicant’s requirement for a PIV card, initiates PIV Request, conducts identity proofing, ensures Applicant has completed training and documentation. • Enrollment Official Performs identity proofing and document gathering for Applicants remote to PCIF. • Registrar Final approval authority for PIV card issuance; ensures ID proofing, background checks and training has been completed. • PCIF Issuer Creates and issues the PIV card upon Registrar approval. • Remote Issuer Issues the PIV card to Applicants remote to the PCIF Security is Everyone's Responsibility

5. Role Requirements • Appointed in writing • Current NACI (or higher) on file • PIV training completed and certificate forwarded to WRSO • U.S. Citizens • Federal employees* *Note: PCIF and/or Remote Issuers may be federal contractors Security is Everyone's Responsibility

6. Acronyms • COR—Contracting Officer Representative • COTR—Contracting Officer Technical Representative • HSPD—Homeland Security Presidential Directive • NAC—National Agency Check (fingerprint check-plus) • NACI—National Agency Check with Inquiries (full background investigation) • OPM—Office of Personnel Management (investigative agency) • OSY—Office of Security (HQ, Dept of Commerce) • PCIF—PIV Card Issuing Facility • PIV—Personal Identity Verification • WFMO—Workforce Management Office (HR) • WRSO—Western Region Security Office Security is Everyone's Responsibility

7. PIV Documentation • PIV Request Form • Security Coversheet for Non-Employees (SCNE) • Legible copy of identification documents (one must be photo ID issued by federal or state government agency) • PIV Applicant training certificate • Proof of prior investigation, OR • SF85, 85P, or 86 Questionnaire • OF 306, Declaration for Federal Employment • Fingerprint cards (FD 258 for non-employees, SF87 for employees) • Fair Credit Reporting Act Form (for SF85P and SF86 only) • Current resume (employees only) Security is Everyone's Responsibility

8. Procedures--Local • Sponsor sends/gives paperwork • Applicant fills it out and gives it to Sponsor • Sponsor ID-proofs Applicant, checks paperwork, submits packet to Registrar (WRSO) • Applicant comes to PCIF (WRSO) for fingerprints, photo • Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card • PCIF Issuer prepares card • Applicant returns to PCIF and signs for PIV card. Security is Everyone's Responsibility

9. Procedures--Remote • Sponsor fills out PIV Request and sends it to Enrollment Official; sends investigative paperwork to Applicant • Applicant fills out investigative paperwork, takes training, and reports to his/her local Enrollment Official • Enrollment Official ID-proofs Applicant, takes photo, collects fingerprints, checks paperwork, submits packet to Sponsor • Sponsor reviews documentation and submits packet to Registrar (WRSO) • Registrar submits fingerprints to FBI, submits investigative paperwork to OPM, waits five days, then approves (or disapproves) PIV card • PCIF Issuer prepares card and sends it to Remote Issuer • Applicant reports to Remote Issuer and signs for PIV card • Remote Issuer returns completed original PIV Request Form to Registrar. Security is Everyone's Responsibility

10. Short Term Visitors • Definition Contractors, guests, and affiliates working on a federal facility for less than six months (180 days) • Procedures --Submit fingerprints/fingerprint cards for criminal history check --Fill out and submit OF 306, Declaration for Federal Employment Security is Everyone's Responsibility

11. HSPD-12 Changes • PIV Card has slightly different look • NOAA logo replaced by DOC logo • PIV cards will be numbered as follows: “PIV-1 Wnnnnn” • No same-day PIV cards for new employees and contractors • Security Worksheet for Non-Employees (SWNE) replaced with memo-format Security Coversheet for Non-Employees (SCNE) • CD 390 ID and Key Request no longer required for badges; replaced by PIV Request Form and cover sheet Security is Everyone's Responsibility

12. Changes Since HSPD-12 Implementation • I-9 for ID-proofing no longer required • Fair Credit Reporting Act Form no longer required for SF85s • Federal supervisors can serve as sponsors for renewing employees • All other renewals will be processed via PIV procedures Security is Everyone's Responsibility

13. Common Errors • PIV Request and SF85 sent without cover sheet • Needed to process investigation or verify investigation is on file with OPM • Signatures missing on PIV Request Form • Section A (Sponsor) • Section B (Sponsor or Enrollment Official). • Copies submitted • Send original PIV Request Form and SF85, with original signatures • SF85 contains numerous errors. Please refer to and use the SF85 Return Checklist to catch the most common errors • PIV Request Form signed by non-Sponsor or non-Enrollment Official • Contractor PIV Request Form signed by Sponsor who is not a COR/COTR • Fingerprint cards smudged; prints pressed not rolled; missing key areas, such as the joint line Security is Everyone's Responsibility

14. What the Future Holds • PIV-2 coming • Smart card chip and interoperability for physical and logical access • “Smart” features include Public Key Infrastructure encryption and limited biometrics to reduce/eliminate need for multiple passwords • Initial implementation October 2006 • Full implementation (only PIV-2 cards issued) by October 2007 • Will require hardware/software and access control systems which are compatible with PIV-2 • 100% of employees, contractors, and long-term guests/affiliates must have completed background investigation on file by October 2007 Security is Everyone's Responsibility

15. HSPD-12 Points of ContactWestern Region Security Office • Regional Security Officer/PCIF Manager • Cheryl Wieser, 206-526-6653 • CWieser@doc.gov • HSPD-12 Point of Contact/Registrar • Jason Haack, Security Specialist, 206-526-6006 • JHaack@doc.gov • HSPD-12 Registrar • Joseph Lubin, Security Specialist, 206-526-4317 • JLubin@doc.gov • HSPD-12 Registrar • Michael Shearin, Security Specialist, 206-526-6674 • MShearin@doc.gov • WRSO Fax, 206-526-4543 Security is Everyone's Responsibility

16. HSPD-12 Points of ContactDOC Office of Security • HSPD-12 Program Manager • Pat Billiter, Agency Identity Management Official, 202-428-4637 • PBilliter@doc.gov • Agency Official for Privacy • Dan Rooney, 202-482-0517 • HSPD-12 Help Desk 202-482-8116 • Training Assistance osy_piv1training@doc.gov • HSPD-12 Website www.osec.doc.gov/osy(HSPD-12 menu on left) Security is Everyone's Responsibility

17. Questions? Security is Everyone's Responsibility