“We went through all the documentation available and asked what agencies needed to become PIV I-compliant,” Spencer said. “Making the checklist available separately was a recommendation from the agencies after we issued the second version of the handbook in July.”
Agencies have until Oct. 27 to make sure their processes for issuing credentials and registering employees meet the criteria laid out in Federal Information Processing Standard 201. Karen Evans, Office of Management and Budget’s administrator for e-government and IT, recently said she expects every agency to meet the deadline.
“The checklist gives agencies the opportunity to identify gaps in their processes and how they will implement the new processes on Oct. 28,” Spencer said.
Spencer said the handbook, which GSA also issued in March and July, still is in a draft stage and that agencies can comment on it. The most recent version contains 202 pages, up from 179.
“We will not go final until sometime early next year,” Spencer said. “The big hole right now is the biometric question. We will wait until there is a final decision on what type of biometric fingerprint they will use. But even after we issue the final document, it always will be updated.”
In addition the PIV I checklist, the handbook includes recent OMB guidance on implementing HSPD-12 and FIPS-201. GSA also included recent acquisition guidance on buying FIPS-201-compliant products and services, Spencer said.
“One of the things we tried to do with this handbook is make it a Web document,” she said. “Whenever there is a reference to a term or guidance, it is highlighted and the user can click on it and go to the part in the handbook or on the Web and find more information about it.”
Autor: Jason Miller
Quelle: Government Computer News, 14.10.2005
