Homeland Security Presidential Directive 12 or HSPD-12, is the presidential directive that requires Federal executive agencies to implement a mandatory common identity management system for their employees and contractors.
2. Why was HSPD-12 issued?
HSPD-12 was issued to enhance security, increase Government efficiency, reduce identity fraud and protect personal privacy through secure and reliable identification. On August 5, 2005, OMB provided specific instructions and deadlines to Federal Departments and agencies to comply with HSPD-12 and FIPS 201 in a Memorandum to the Heads of all Departments and Agencies. In that memorandum OMB explains "Inconsistent agency approaches to facility security and computer security are inefficient and costly, and increase risks to the Federal government. Successful implementation of the Directive and the Standard will increase the security of your Federal facilities and information systems."
3. What does HSPD-12 require?
HSPD-12 requires that the Federal executive departments and agencies issue secure and reliable forms of identification to their employees and contractors (including contractor employees).
4. What does it mean to have more secure and reliable forms of identification?
It means that the new identification badges must be:
based on sound criteria for verifying an individual employee's identity;
strongly resistant to identity fraud, tampering, counterfeiting, and terrorist exploitation;
able to be rapidly authenticated electronically; and
issued only by providers whose reliability has been established by an official accreditation process.
5. Who is covered by HSPD-12?
Federal employees, contractor employees, and others (e.g., grantees) seeking access to Federal government facilities and/or information systems.
6. Do employees or contractor employees who work off-site need a new badge under HSPD-12?
If they have routine physical or logical/virtual access to NASA facilities or information systems, then they will be covered by the HSPD-12 standards.
7. What are the investigation/background check requirements to be eligible for the new badge?
At a minimum, everyone seeking access must complete the appropriate forms to be submitted to the Office of Personnel Management for a National Agency Check and Inquiries (NACI) investigation. Federal agencies continue to be individually responsible for establishing personnel identity and risk designations, in accordance with Executive Order 10450, and 5 Code of Federal Regulations, Section 731. Depending on the access or clearance level the individual requires, as determined by the Agency, the level of background investigation may vary. Moderate or high-risk positions are deemed "Public Trust" positions, and require a more extensive background investigation of candidates, including medical and financial information.
8. What is NACI?
A National Agency Check and Inquiries (NACI) is the minimum level of investigation required of Federal employees as a condition to employment with the Federal government and now for contract employees as a condition to access to Federal facilities and information systems. It is essentially a check of law enforcement records, and written inquiries to schools, police departments, and other references to verify your status. The required background investigations, in turn, require a fingerprint check of each individual. Background investigations, including fingerprint checks, have been required of Federal employees by Executive Order 10450, in effect since 1953. HSPD-12 and FIPS 201 expanded the persons and positions that require such investigations.
9. Can my Personal Reliability Program (PRP) be used instead of NACI investigation?
No. The PRP may continue but a NACI must be initiated as the minimum investigation to ensure the PRP status is kept current.
10. Can my investigation for my security clearance be used instead of a NACI investigation?
Yes, if that clearance investigation is current it may be used for your HSPD-12 investigation.
11. Is NASA required to protect Personally Identifiable Information?
Yes, all information acquired in the credentialing process is to be maintained in accordance with the Privacy Act of 1974. The Agency follows all applicable Government-wide standards for controlling and protecting information systems. NASA has conducted a Privacy Impact Assessment on this system. It can be found at the following link: http://www.nasa.gov/privacy/PIA_NASA_Security_Records_System.html
12. Are there penalties for improper disclosure of PII?
Any officer or employee of NASA, or contractor acting on our behalf, who willfully discloses the personal information to individuals or an agency not entitled to receive it may be subject to criminal penalties. NASA may also take disciplinary action against NASA employees who improperly disclose or misuse personally identifiable information.
13. Why are they issuing the "One NASA Badge" to people now, when they will have to rebadge in the future?
The "One NASA" badges are no longer being issued except to new employees or where existing badges expire, etc. However, fingerprinting, investigations and identification for non-NASA employees will continue in preparation for the issuance of the new badges.
14. How will I know when I need to obtain a new badge?
You will be notified by a Security representative or your office's administrative point-of-contact.
15. How long will my old badge still work?
You will continue to use your current badge until you are notified to obtain a new badge.
16. Can I get a new badge before my NACI is completed?
For employees who need access and are NASA or non-NASA employees for 180 days or greater, a badge may be issued based on the results of their completed fingerprint checks, while their NACI is in progress. For those with less than a 180-day relationship with NASA, a temporary badge may be issued. Daily visitor badges may be issued based on proper identification for those visiting NASA for one time only such as family, deliveries, etc.
17. What are the procedures if I want to amend my Privacy Act records?
