HSPD12 Implementation: Overcoming the Challenges to Ensure Future Success

1
HSPD-12 Implementation Overcoming the
Challenges to Ensure Future Success
General Services AdministrationOffice of
Governmentwide Policy

• Small Agency CIO Council Meeting
• February 24, 2006

2
Timeline
 
3
HSPD-12 Executive Steering Committee

• Comprised of Six Agency Executives
• Chris Niedermayer, USDA
• Scott Charbo, DHS
• John Sindelar, GSA
• Mary Dixon, DOD
• Rich Yamamoto, Department of Commerce
• Goals
• Reduce the cost of large agency HSPD-12
  implementation
• Establish a mechanism for small agencies to
  procure HSPD-12 services (either from an agency
  or through outsourcing)
• Share resources to ensure agencies meet the
  October 2006 HSPD-12 deadlines and
• Ensure Government-wide interoperability.

4
The Federal Identity Credentialing Committee

• Brings together members of Physical Access
  community (smart cards) and members of Logical
  Access community (PKI)
• 25 Agency Representatives from the IT, Human
  Resources and Physical Security disciplines
• Developed
• Smart Card Guidelines for Federal Agencies
• Federal Common Policy Framework for PKI
• ID Card Topology Requirements
• Groundwork in Identity Proofing/Verification
• PKI Shared Service Provider Program
• Federal Identity Management Handbook
• Computer Based Training for Implementation

5
RFI Results

• 71 Unique Responses
• 13 Indicated Turnkey Service Capability
• General consistency in the cost data
• Some questions concerning what is included
• Conclusion Industry is prepared to provide the
  services required by FIPS-201 for Enrollment and
  Card Management.
• Next Steps
• Develop High Level Architectural Concept
• Start tightening up the technical specifications
  and requirements definitions (including business
  requirements) for a managed solution
• Recognize differences between the ramp up and
  the normalized activities
• Awaiting results from two agency data calls due
  Feb 24, 2006.
• Update Performance Metrics based on RFI feedback

6
Acquisition Policy Strategy

• Two new FAR Rules
• FAR Case 2005-015
• Addresses HSPD-12 requirements for contractor
  badging
• Interim rule issued end of CY-05
• FAR Case 2005-017
• Directs agencies to acquire only approved
  products
• Interim Rule in Committee awaiting final approval
• OMB Guidance designates GSA as the executive
  agent for Government-wide acquisitions of
  information technology" for the products and
  services required by HSPD-12
• Acquisition services will be offered via GSA
  Schedule Contracts Blanket Purchase Agreements
• NIST Conformance Testing for Smart Cards, Applets
  and Middleware
• GSA Performance and Interoperability Evaluation
  Program for identified products and Services (see
  www.smart.gov/fips201apl)

7
Sponsorship

• Assisting smaller agencies with HSPD-12
  Implementation
• Alternative 1 Larger agency sponsorship of
  smaller agency for assistance with enrollment,
  card personalization, card issuance
• GSA will assist those small agencies that are
  tenants of GSA owned or leased buildings and that
  are dependent upon GSA for administrative support
• Alternative 2 Consolidate repeatable components
  across government and provide enrollment/issuance
  services through government-wide service
  offerings.
• Current focus of the Executive Steering Committee
• Architectural Concept under development
• Services will be made available in centralized
  locations nationwide

8
For More Information

• Supporting Publications
• FIPS-201 Personal Identity Verification for
  Federal Employees and Contractors
• SP 800-73 Interfaces for Personal Identity
  Verification
• SP 800-76 Biometric Data Specification for
  Personal Identity Verification
• SP 800-78 Recommendation for Cryptographic
  Algorithms and Key Sizes
• SP 800-79 Issuing Organization Accreditation
  Guideline
• SP 800-85 PIV Middleware and PIV Card
  Application Conformance Test Guidelines
• NIST PIV Website (http//csrc.nist.gov/piv-progra
  m/)
• Federal Identity Credentialing Website
  (http//www.cio.gov/ficc)
• Smart Card Interagency Advisory Board
  (www.smart.gov/iab)