Exhibit_6a_R10_OMA_HSPD12_FY16.pptx

Homeland Security Presidential Directive (HSPD) – 12

Program Overview 21 October 2015

Office of Mission Assurance

GSA Office of Mission Assurance

FOR OFFICIAL USE ONLY

Agenda HSPD-12 and Why It is Important Related Policies, Standards, and Guidance GSA’s HSPD-12 Implementation Key Players Investigation Decision Process Contractor Background Investigation and GSA Access Card Issuance Roles and Responsibilities Projected Timeline Contract Deliverables Questions

HSPD-12 and Why It is Important What is Homeland Security Presidential Directive 12 (HSPD-12)?

A presidential directive that establishes a mandatory, government-wide standard for secure and reliable forms of identification issued by the federal government to its employees and contractors

Why is HSPD-12 Important?

Increases efficiency across federal government: Supports doing more with less in budget-constrained environment Enhances security: Responds to increasing cyber security threats Reduce identity fraud and protects personal privacy: Smartcard technology and issuance and use requirements protect employees’ and contractors’ identity and privacy data

Related Policies, Standards, and Guidance

Related Policies, Standards, and Guidance

Key Players Vendor POC (Prime) Contractor Employee GSA PM and COR GSA Office of Mission Assurance (OMA) Regional Credentialing Office Managed Services Office (MSO) Contractor Investigation Team Office of Personnel Management (OPM) Federal Investigative Services Facilities, Security, and Contracting (FSC) – Personnel Security

Investigation Decision Process Follow the linked Contractor HSPD-12 Investigation Decision Flowchart to determine the type of investigation required.

As noted on the linked slide: Investigations and HSPD-12 credentials cost money. Please consider this in decision-making and execute RWA actions when appropriate to recoup the costs.

If the person requires access 10 days or fewer, be sure to consider the possibility of escorting. R10 Escort Policy

Contractor Background Investigation and GSA Access Card Issuance Office of Mission Assurance Investigations are conducted by external service provider Office of Personnel Management Federal Investigative Services (OPM FIS).

GSA Credential and Identity Management System (GCIMS) is GSA’s system of record for GSA identities and background investigations.

GSA’s Managed Service Office (MSO) completes enrollments and activations.

Onboarding Forms Submit Fingerprints Sponsor Enroll; e-QIP Online Form Produce Card Activate Card Enter Adjudication

MSO

GCIMS

HSPD-12 Division releases electronic fingerprints from to Requesting Official collects Contractor Information Worksheet (CIW) Regional Credentialing Officer (RCO) or GSA Access Card POC sponsors contractor in GCIMS GSA HSPD-12 Division uploads sponsorship from to Contractor schedules appointment at USAccess Credentialing Center (MSO) to enroll and completes e-QIP Online Form GSA IT Service Desk grants IT access based on GCIMS record updates GSA HSPD-12 Division enters adjudication in MSO produces card Contractor activates card OPM FIS Conducts Investigation

MSO

OPM provides adjudicative decision to GSA HSPD-12 Division

GCIMS

OPM

Roles and Responsibilities

Schedules and enrolls at MSO station (identity verification and fingerprinting) Completes e-QIP application Returns to MSO station after provided Enter-on-Duty approval and notice that credential is ready for activation Immediately turns-in credential when employee or contract terminates Provides verification of active personnel, as requested GSA COR/PM Validates need for each investigation requested Assists contractors with questions Notifies OMA when contractor leaves GSA contract, collects GSA Access Card, returns card to OMA for destruction

Roles and Responsibilities (continued)

Creates/Updates GCIMS record Emails contractors on MSO enrollment and e-QIP processes Sponsors contractor for enrollment in MSO Sends contractor e-QIP invites Releases digital fingerprints to OPM Answers help desk questions Updates GCIMS on contractor initial and final adjudications Distributes and destroys GSA Access Cards OPM Facilities, Security, and Contracting (FSC) – Personnel Security Verifies completeness of e-QIP Makes initial and final adjudication determinations on contractor background investigations OPM Federal Investigative Service (FIS) Performs investigations on contractors

Projected Timeline

Kickoff

CIW

e-QIP Invite Enroll & Submit Docs Initial Favorable Credential Issue Final Favorable End of Project Credential Turn-in Acquisition Strategy

Credential Update

Contract Deliverables Vendor POC should maintain a list/spreadsheet of all personnel (prime and sub-contractors) who are active on the contract. Periodically, a list will be sent to the contractor POC to validate those that are current.

Upon termination of the contract and of any employee, the contractor must immediately surrender the credential(s) for Inactivation. Otherwise, the credential costs may be charged back to the contractor.

Questions OMA R10 Security, HSPD-12 Assistance, CIWs and Escort Processing:

R10SecurityEM@gsa.gov

Back-up Slides Investigation/Adjudication Fees and Credential Card Costs Contractor HSPD-12 Investigation Decision Flowchart R10 Escort Policy

Investigation/Adjudication Fees and Credential Card Costs Office of Mission Assurance

Return

NO

Contract Award

Is work in federally-owned building?

YES

NO

Is work for >6 months?

YES

NO

Is work for only non-sensitive info and non-elevated IT access?

Request Long-Term, NACI

Request Long-Term, MBI

Is work for more than 10 days?

Does FSC or tenant policy prevent escorting?

Is work for only non-sensitive info and non-elevated IT access?

YES

YES

Request SAC, or NACI if GSA Access Card is needed

Request Long-Term, MBI

No investigation required. Follow the R10 Escort Policy.

Is work in an FSL 4, FSL 3 (100% federal gov’t occupied), or bldg with child care?

YES

No investigation required. Follow the applicable access policy.

Does the tenant or FSC require contractor investigations?

NO

YES

Execute an RWA. Request investigations accordingly.

Contractor HSPD-12 Investigation Decision Flowchart

START

END

END

Return

GSA R10 ESCORT POLICY

Escorts are permitted for temporary contractors for very short duration; jobs ten days or less. Escorts may be government employees or long term contractors (including contract guards) who have received an EOD and whose NACI is in process. Escorts must maintain control and be in sight of those they are escorting at all times. The ten day rule is not to be used throughout a project, but rather for a simple portion of the project that will be under ten days. In order to be approved for an escort, the following approval process must be followed:

1. Project Manager must fill out the R10 escort approval form.

2. Project Manager must send to the appropriate GSA Property Manager for approval.

3. Project Manager will send form to the GSA R10 Security Office at r10securityem@gsa.gov

4. Security Office will verify if applicant has previously under gone a background investigation and will validate that an “unfavorable” or “unfit” determination was not previously issued. Security will also enter all information for tracking purposes into GCIMS. If Security notes that the applicant is being escorted on multiple occasions, security may not approve and require applicant undergo a background investigation.

5. If the security office denies an escort request, the contractor must either not work on that project or must undergo the appropriate background investigation and adjudication prior to beginning work.

Note: It is important the project manager plan the security for each project. Each project and facility will be different, however it is important to know what the building security rules and procedures are and that each contract company is made fully aware on how to comply. For example, if work is going to be done after hours in a level (4) facility with tenants that have high security concerns and there is no after hours security guard, it may be necessary to hire a guard or develop an escort plan. The intent here is to ensure that contractors do not have full access to a federal facility with no security protocols put in place. The R10 HSPD-12 Security Office is available to assist with these plans.

Return to slides Return to Flowchart image1.png image2.png image3.png image4.png