DPSAC News Header

July 24, 2013 issue of the DPSAC NEWS

In This Issue
HHS ID Badge/PIV Card Rollout Scorecard
idbadge.nih.gov -- An Address to Bookmark
NED Training Schedule for July and August
NIH Once Again Earns Departmental Accreditation for its PIV Card Issuance Services
Helpful Tips
News Briefs
Safety Corner



Contact Us


Division of Personnel Security and Access Control (DPSAC),  

Office of Research Services  


Personnel Security 

Helpdesk: 301-402-9755

e-QIP: 301-402-9735

Appointment Line: 301-496-0051

E-mail: orspersonnelsecurity@ 



Access Control

Helpdesk: 301-451-4766

E-mail: facilityaccesscontrol@ 




        HHS logo small Logo Mark NIH Logo Mark    

7-19-13 Pie Chart for 7-24-13 DN
Here are the most recent NIH badging statistics provided by HHS as of July 7, 2013
Sponsored: 38,363   
Enrolled: 37,932  
Issued: 37,543*


*This figure represents 97.9% of individuals who have been sponsored.


  7-19-13 Excel File for 7-24-13 DN

idbadge.nih.gov - A Great Address to Bookmark


Did you know that as of June 21, 2013, the Division of Personnel Security and Access Control (DPSAC) has issued 37,446 HHS ID Badges (PIV Cards) to NIH employees, contractors and affiliates? Of course you know, because you read the 'ID Badge Rollout Scorecard' published every other week in DPSAC News (see above).


It's not surprising that with this many active HHS ID Badges in circulation, plus the ongoing issuance of new cards for incoming staff and the return of deactivated badges for staff leaving NIH, there's a standing need for current information relating to HHS ID Badge policies and procedures. That source of information is the DPSAC website: www.idbadge.nih.gov. The link www.ors.od.nih.gov/ser /dpsac/Pages/ Home.aspx will also get you to the website.


This popular site receives thousands of visits a month. Pages frequently visited include: 

  • getting a badge 
  • e-QIP 
  • position sensitivity levels 
  • background checks 
  • back issues of DPSAC News 
  • NED training (including a schedule of free classes for beginner and advanced NED users) and job aids 
  • locations and hours for enrollment and badging offices
  • contact information and hours for Lifecycle Work Stations
  • forms 
  • HSPD-12 policies and procedures

If you regularly need information about badge-related issues, you'll want to bookmark this site. Take a few minutes to check out www.idbadge.nih.govChances are you'll discover topics you'll want to revisit from time to time.  


NED Training Schedule for July and August    

The HSPD-12 Program Office has added Beginner and Advanced "NED and the PIV Process" classes on Friday August 23 to close out its summer schedule. Quickly master NED in a hands-on computer lab environment. All classes are FREE!

July 24, 2013 Advanced NED Class Cancelled   

* For the first time, these courses, and all future NED courses, will be posted on the CIT Training site where visitors will be able to view availability for any class and receive a confirmation immediately after registering. The catalog of NED classes is posted at: ttp://training.cit.nih.gov/coursecatalog.aspx under "General Seminars."
When you see a course you want to take, just click on the course name (listed in the right column of the table). You'll be taken to the HHS Learning Management System (LMS) where you can register for the course online.

To log onto the HHS Learning Management System you can use either your PIV card and PIN or your NIH credentials.If you experience any difficulties accessing the LMS, please contact the CIT Training Program at 301-594-6248 or send an e-mail to cittraining@mail.nih.gov
Also, the HSPD-12 Program Office will continue to post the NED training schedule on the DPSAC website at: http://www.ors.od.nih.gov/ser/dpsac/Training/Pages/nedweb.aspx.

NIH Once Again Earns Departmental Accreditation for its PIV Card Issuance Services


On June 12, 2013 the HHS Designated Accreditation Authority formally notified the Department's Organization Identity Management Official that it was issuing an authorization to operate (ATO) for NIH's PIV Card Issuance (PCI) services. 


The notification stated, in part, "that the PCI's policies, procedures, and processes are in compliance with NIST SP800-79-1, FIPS 201-1, and our organization's own policies, regulations and standards. Accordingly, I am issuing an authorization to operate  (ATO) for NIH's PCI services. This ATO applies to all facilities under the NIH PCI program which can be reviewed in the attached document."


The Accreditation letter goes on to say that the ATO will remain in effect for 3 years from the date of this letter subject to the annual updating of certain documents and the completion of successful lifecycle walkthrough annually.


Facilities under the NIH PCI program include:

  • 31 Center Drive (Building 31) Room 1B03, Bethesda, MD
  • 31 Center Drive (Building 31) Room B1A26, Bethesda, MD
  • 10 Center Drive (Building 10) Room 1C52, Bethesda, MD
  • Building 426, NCI Complex, Fort Detrick, MD
  • 251 Bay View Boulevard, Room 03A401, Baltimore, MD
  • 251 Bay View Boulevard, Room 03A404, Baltimore, MD
  • 903 South 4th Street, Building 8, Room 11, Hamilton, MT
  • 903 South 4th Street, Building 30, Room 30116, Hamilton, MT
  • 111 T W Alexander Drive, Building 102, Room S150, Research Triangle Park, NC   
Helpful Tips
Removing your PIV Card from your card reader will NOT log you off your computer--however, after a period of inactivity, whether your PIV card is inserted in your card reader or in your card holder, your computer will log you off and you'll have to log back in with your PIV Card and PIN. 

ICs that want to add LWS operators to the approved roster --
send a written request to Richie Taffet at: taffetr@mail.nih.gov. Your request should include the new operator's name, their IC, their NED number, as well as the operator's e-mail address, building/room and phone number.  

Once Mr. Taffet has approved the request, he will forward the name(s) to HHSIdentityAdmins@deloitte.com to complete the approval process, add the name to the LWS operator roster and inform the IC that the individual is now approved to operate the LWS.

Need to make changes to the LWS operator directories? -- drop an e-mail to Lanny Newman, newmanl@mail.nih.gov, and let him know what needs changing (e.g., adding new operators or LWS locations, removing operators, etc.). Remember, before a new operator can be added to the LWS directory, s/he must first be approved by Richie Taffet (see preceding Helpful Tip).  


If an LWS is not available in your IC or your immediate area, and you work in the greater Bethesda or Rockville area -- please call 301-451-4766 or 301-402-9755 to schedule an appointment with the Division of Personnel Security and Access Control located in Building 31, Room B1A26 or in Building 10, South Lobby, Room 1C52.  


If you work outside the Bethesda/Rockville area, contact your local badge issuance office.  


Subscribing to DPSAC News -- Know someone who would benefit by subscribing to DPSAC News. Have them contact Lanny Newman, newmanL@mail.nih.gov, with a request to be added to the mailing list. The HSPD-12 Program Office publishes this bi-weekly e-newsletter every other Wednesday.

Past issues get posted on the 'idbadge' website at: http://www.ors.od.nih.gov/ser/dpsac/resources/newsletter/Pages/newsletter.aspx 



Q. I have a couple of employees who are MAC users and do not use their badges/certificates to access their computers. Are MAC users required to renew their certificates?

A. According to CIT, there will soon be a push at NIH to PIV-enable MAC computers. MAC users will probably lose their "exemption" (from PIV card login) in the upcoming year. Failure to renew certificates while they are still active makes it more difficult for the user to renew them later. While MAC users are presently not required to renew their certificates, it will be easier on them in the future if they do.
QI thought at one time I had seen a security level guide or list that showed what level a Grants Management Specialist, Program Official, etc. should be. Can you send me or point me in the direction where I can find it?
A. The documents you're referring to, "Form NIH 2866 (Position Sensitivity Worksheet)" and the "Position Sensitivity Worksheet Instructions" (the document that accompanies Form 2866) are built into NED under the Position Information Section. For security purposes, DPSAC does not post these documents on its public website.

A short description of each document is provided below: 
  • Form NIH 2866: The purpose of this form is to establish the position sensitivity level that is required for NIH positions that are subject to Homeland Security Presidential Directive 12. 
   Supervisors must complete this form for positions they supervise before        the position is advertised or filled. For contractor positions, the person
   requesting the position (i.e., the Project Officer) is required to complete the
   form when preparing a request or modification for contractor support. The
   form should be kept on file in the IC.

  • Position Sensitivity Worksheet Instructions (instructions for completing Form 2866): The purpose of the Position Sensitivity Worksheet is to determine the position sensitivity that is required for a particular NIH position. A section explaining how to calculate the Minimum Position Sensitivity Level is included in the worksheet. 

   This worksheet should be used for all positions with appointments of more

   than six months and includes all FTE, non-FTE, and contractor positions.

   This worksheet should also be used for all positions with appointments of

   less than six months IF the position DOES include any of the "Exception

   Factors" listed on the worksheet. This includes all FTE, non-FTE, and

   contractor positions.

News Briefs

NIST Publishes New Guidance for Using Iris Images as Biometric Identifiers on PIV Cards


The following article was adapted from a GovInfoSecurity.com article written by Eric Chabrow that was published July 15, 2013. 


New guidance from the National Institute of Standards and Technology should clear the way for organizations to  incorporate iris images as biometric identifiers on personal identity verification cards.


NIST Special Publication 800-76-2: Biometric Data Specifications for Personal Identity Verification, which was released to the public on July 12, 2013, also incorporates on-card fingerprint comparison as options for federal government-issued smart cards.


Organizations might choose to add iris images as an alternate biometric over fingerprints since fingerprint collection can be difficult for some individuals.


According to the NIST publication, standardized compact images of one or both irises can be loaded on the PIV card for compact on-card storage and fast reading times.


The document provides performance specifications for iris biometrics and provides specifications for iris cameras to guide implementers on camera selection. These standards-based elements support interoperability within and across agencies using iris recognition technology.


To read the full article, click on the following link: 

http://www.govinfosecurity.com/applying-iris-images-to-piv-cards-a-5909?rf= 2013-07-16-eg&elq=8d45f0e454904f419 ed311ea6f83e6e1&elq Campaig nId= 7263.  

Executive Plaza Enrollment and Badge Issuance Stations Move to 9609 Medical Center Drive, Rockville, MD  


The Enrollment and Badge Issuance Stations previously located at 6116 Executive Boulevard, Rooms 4138 and 4137 recently relocated to 9609 Medical Center Drive, Rockville, MD. DPSAC is providing staff at the new site.


Hours of operation at these new locations are posted at: 



Safety Corner 


Help NIH Beat the Heat by Following a Few Simple Steps


The Office of Research Services (ORS) recently sent the following message to NIH staff in the DC Metro area: 


Last year, the Washington/Baltimore Metropolitan area experienced extreme temperature conditions during the summer months contributing to power outages, including at NIH facilities.


The National Weather Service is forecasting extreme temperatures over the next week. In order to meet energy and cooling demands, utility providers, including our own NIH central utility plant, typically run near capacity.


To reduce the threat of a power outage and lower energy consumption, we recommend all NIH employees follow a few easy steps to help decrease non-essential heat and energy sources during the summer months, particularly during this period of peak demand.


  • Keep windows closed and shades lowered when possible  
  • Turn off lights, printers, copiers and other non-essential electronic devices when not in use, especially after normal work hours  
  • Use the stairs instead of the elevator when possible  
  • Ensure that the low power/sleep mode feature is enabled on computers and monitors when not in use  
  • Refrain from using personal space heaters, especially during this period of peak energy use (space heaters are only allowed in NIH facilities when it is determined by the NIH Fire Marshal and the Office of Research Facilities that a temperature cannot be properly regulated by the building's heating/cooling system)


These simple practices help protect everyone, but particularly our critical needs - patient and animal care, critical research and computer data centers. These are good practices to follow regularly at work and home, but are especially helpful when energy consumption reaches peak levels.


The NIH anticipates this period of peak energy use to be in place until at least 12pm (noon) on Monday, July 22. We will then evaluate if continued curtailment practices are necessary.


Thank you for supporting NIH's efforts to reduce energy consumption.



NIH Mission First, Safety Always Award - Who Will You Nominate?


A call for nominations for "The NIH Mission First, Safety Always Award," sponsored by the Division of Occupational Health and Safety, ORS, originally distributed to all NIH staff on July 15, 2013, is reprinted below.


The NIH Mission First, Safety Always Award, presented by the Office of Research Services (ORS), Division of Occupational Health and Safety (DOHS), showcases NIH personnel who have demonstrated leadership, innovation and involvement in their organization's safety culture and promoted safety in the workplace.


Nominations can be submitted through the ORS, DOHS website:


Please nominate a colleague who has demonstrated safety leadership, with practical examples in two or more of the following areas:

  • Leadership attributes that set the nominee apart from his or her peers  
  • Initiating and/or leading a successful safety initiative  
  • Engaging peers and transforming the safety culture of the organization  
  • Promoting safety as an important part of your program  
  • Working to correct unsafe or unhealthful workplace conditions or hazards

Nominations are open until August 2, 2013. NIH wants to recognize and celebrate safety excellence! Nominate a safety leader today!


If you have any questions, please e-mail ORSSafetyDay@mail.nih.gov or send written questions to: NIH, OD, ORS, DOHS (Attn: NIH Mission First, Safety Always Questions), Bldg 13, Room 3K04, 13 South Drive, MSC 5760, Bethesda, MD 20892-5760. 



A biweekly e-newsletter from the Office of Research Services, Division of Personnel Security and Access Control (ORS/DPSAC) to keep you informed as NIH rolls out "Homeland Security Presidential Directive 12" (HSPD-12) establishing a common identification standard to better safeguard NIH and its workforce.