DPSAC News Header

May 27, 2015 issue of the DPSAC NEWS

In This Issue

   

 

Contact Us

 

Division of Personnel Security and Access Control (DPSAC),  

Office of Research Services  

 

Personnel Security 

Helpdesk: 301-402-9755

e-QIP: 301-402-9735

Appointment Line: 301-496-0051

E-mail: orspersonnelsecurity@ 

mail.nih.gov

 

Access Control

Helpdesk: 301-451-4766

E-mail: facilityaccesscontrol@ 

mail.nih.gov

 

       

        HHS logo small Logo Mark NIH Logo Mark    

DPSAC Expands Badging Services for Incoming Summer Students  

 

New Badging Policy Requires All Students Be Issued RLA Badges  

 

With the arrival of the 2015 class of summer students here at the NIH campus, DPSAC has temporarily expanded its enrollment and issuance stations in Building 10 and Building 31.

This expanded service is necessary not only to accommodate the new arrivals, but also to meet the demands of issuing RLA badges to this population for the first time. RLA badges, unlike legacy badges, provide both physical and logical access.

To receive an RLA badge, summer students will need both enrollment (15 minutes) and issuance (15 minutes) appointments. In the past, students were issued legacy badges, which only required one appointment and took about 5 minutes.

Background Investigation
Billing Information    


What accounting information does DPSAC use in e-QIP?


Understanding the mechanics of how accounting information is used with requests for background investigations and where DPSAC retrieves this information from the ICs can be a bit puzzling. Yet ICs need to understand this process in order to track their expenses and plan their budgets accordingly.

DPSAC provides various components -- Intra-Governmental Payment and Collection Code (IPAC), Agency Location Code (ALC), the Security Office Identifier (SOl), Submitting Office Number (SON), and Treasury Account Symbol (TAS) -- to pay for the investigation on each case submitted within e-QIP. The IPAC, ALC and SOI will remain constant; only one TAS and SON is used for each IC. These have been automated in e-QIP to minimize human error.*

Without accurate codes in e-QIP, requests submitted by DPSAC to OPM will be returned with an error message stating that the codes are not valid.

These codes will remain constant for the life of the investigation, impacting all subsequent bill events, which may cross multiple invoices. Therefore it is critically important that these codes are properly and accurately included within each case submission through e-QIP.

Additionally, DPSAC will use internal NIH Common Account Number (CAN) information to help further identify proper disbursement for billing. DPSAC will obtain this information for from an individual's record in the NIH Enterprise Directory (NED).

When an Administrative Officer (AO) registers an individual for a position in NED, he or she is required to complete position information, which includes the individual's position sensitivity and risk designation. This in turn identifies the type of background investigation required for the position and automatically determines how much this will cost the IC.

During registration of the position in NED, the AO is also required to provide a CAN that they are authorizing DPSAC to use.      


If ICs discover discrepancies during the billing process, DPSAC will only be able to double check the CAN information that was authorized for use by the IC in NED and confirm that this was the information used with the electronic request transmitted to the Office of Personnel Management (OPM).

When do charges appear? 

DPSAC is often asked, "When should we expect the charges to occur for the background investigations?" According to Personnel Security Specialist Lindsay Gorewitz, there is no straightforward answer to this question since it depends on the successful completion of a set of mandatory events, all of which may have varying time frames.

All of these events, illustrated in Figure 1 below, must be completed in sequence by the respective participants (the AO, the applicant, DPSAC, and OPM) before the IC can expect to see a charge.

Figure 1: The Sequence of steps that must be completed before the cost of a Background Investigation is charged to the IC. Click here to view an enlarged  graphic.
 
To improve the quality of investigation submissions, OPM FIS has added the verification of Submitting Office Number (SON), Security Office Identifier (SOI), and Intra-Governmental Payment and Collection Code (IPAC) to the Electronic Questionnaire for Investigations Processing (e-QIP).

This will help reduce the number of cases that are unacceptable due to incorrect SON/SOI/IPAC information. If the agency user attempts to use SON, SOI, or IPAC codes that are not compatible with OPM's system, the user will receive a validation error and will not be allowed to submit the case until a valid code and/or combination of codes is provided.
  

 

Board Members and the Badging Process

This article first appeared in the January 7, 2015 DPSAC New.  

 

Distinguishing Between Special Government Employees (SGEs), Representatives and Federal Employees for Badging Purposes

 

On September 2, 2014, NIH implemented revised policies and procedures for issuing "Extended Visitor Badges" (a type of NIH Legacy badge) as part of a continuing effort to improve security at NIH. These changes were conveyed to the Administrative community via a November 3, 2014 e-mail from the HSPD-12 Program Office (see: New Extended Visitor Badge Application Policy [pdf]) and in DPSAC News articles (e.g., September 17, 2014 DPSAC News).

 

Each year, NIH's National Advisory Councils/Boards, Boards of Scientific Counselors and Program Advisory Committees generally replace one quarter of their members. Below is an explanation of the three classifications of board members and the required level of background check for each one.

 

Board Members at the NIH may include the following classifications of individuals:

 

1)    Federal Employee - NIH Federal Employee, who has a PIV Card issued by NIH, or Non-NIH Federal Employee, who has a PIV Card issued by another Federal entity. This individual is in the NIH Enterprise Directory (NED) and subject to the requirements to obtain a PIV Card. Please note that if a federal employee already has a PIV Card, he/she will not be required to complete additional background checks to serve as a Board Member.

2)    Special Government Employee (SGE) - is a member of an NIH Advisory Council, Board of Scientific Counselors or Program Advisory Committee who receives an honorarium and/or per diem and travel benefits the same as a federal employee.

The Secretary of the Department of Health and Human Services, the Director of NIH, or the Director of an Institute/Center(IC) appoints these individuals to serve on an NIH Advisory Council, Board of Scientific Counselors, or Program Advisory Committee. This individual is entered into NED and the NIH Police will conduct a name check before issuing an NIH ID (Legacy) Badge. This individual will not be fingerprinted and is not considered a full time federal employee or a contractor.

3)    Representative - This individual is a representative of an organization outside of the federal government, (e.g., the American Lung Association), and not compensated in any way by the NIH. This individual is not in NED and is subject to a name check to obtain the NIH ID (Legacy) Badge. Please note that this individual will not be fingerprinted. S/he is not a federal employee or a contractor.

 

Process for Requesting an Extended Visitor Badge (Legacy Badge) for Special Government Employees (SGEs)

  1. The IC Administrative Officer (AO) must enter the SGE into the NIH Enterprise Directory (NED) and sponsor the individual for an ID badge. This will notify the NIH Police that a badge has been requested.
     
  2. The NIH Police will run the individual's name through the FBI Criminal Information Database.
     
  3. The NIH Police will issue the NIH ID (Legacy) Badge to the Representative when the name check results return favorably.

  4. If the results come back as unfavorable, the Security and Emergency Response office will contact the IC. 

Process for Requesting an Extended Visitor Badge (Legacy Badge) for Representatives  

  1. The Representative fills out the Extended Visitor Badge Application form (pdf) noting that he or she is a Board Member. Please note that a PIV-trained Administrative Officer must sign as the Sponsor on the form.
     
  2. The Representative submits the completed form to the NIH Police for a name check -- the same name check that is conducted for an SGE.
     
  3. The NIH Police will issue the NIH ID (Legacy) Badge to the Representative as soon as the name check results return favorably.
     
  4. If the results come back unfavorable, the Security and Emergency Response office will contact the IC.

Issuing Extended Visitor Badges at NIH - Then and Now

Prior to 2014, NIH could issue an ID badge to an Extended Visitor based on a 'Name Check' of that individual since a Name Check provided an individual's complete criminal history.

The NIH police processed 'Name Checks' through the FBI's National Crime Information Center (NCIC) and were able obtain a full criminal history profile on people sponsored for a badge, free of charge. 

The NCIC check was the minimum acceptable criteria agreed to by HHS that gave NIH the delegated authority to print an Extended Visitor badge and grant a person access.

Two nearly simultaneous events took place in 2014 that forced a review of physical access privileges offered to non-NIH staff: 

First, the FBI restricted NIH's ability to obtain an individual's complete criminal history using a 'Name Check', citing a 300% increase in NIH's use of the system since 2010 and a shift in FBI policy.  

Second, as a result of this change, and to maintain NIH's credentialing authority from HHS, the extended visitor categories were reduced to include only those individuals who meet the following five criteria:
  1. The individual has a supporting role to the NIH mission
  2. The individual has a recurring requirement to enter the campus for the purposes of supporting the mission
  3. The individual is sponsored by an Administrative Officer (AO), who is authorized to enter persons into NED for an HHS ID Badge (PIV Card)
  4. The individual allows the NIH Police to take his/her fingerprints and the Division of Personnel Security and Access Control to adjudicate the results, if issues are uncovered.  
  5. The sponsoring IC pays for the cost of processing fingerprints, which is currently $21.50 (FY2015)

NED Training Schedule: June - September, 2015

   
Whether you are new to NED or an advanced NED user who needs to hone your NED skills, the HSPD-12 Program Office has a training program for you. These classes are designed to help beginners and advanced users quickly master NED in a hands-on computer lab environment. All classes are FREE!    

   

       

How to Enroll

The NED courses are posted on the CIT Training site where visitors can view availability for any class and receive a confirmation immediately after registering. The catalog of NED classes is posted at: http://training.cit.nih.gov/coursecatalog.aspx under "General Seminars." 

 

When you see a course you want to take, just click on the course name (listed in the right column of the table). You will be taken to the HHS Learning Management System (LMS) where you can register for the course online.

 

To log on to the HHS Learning Management System, you can use either your PIV card and PIN or your NIH credentials. If you experience any difficulties accessing the LMS, please contact the CIT Training Program at 301-594-6248 or send an e-mail to: cittraining@mail.nih.gov.   

         

Helpful Tips

Need help understanding the HHS ID badging process or other badge-related issues? -- you can get many of your questions answered by searching the DPSAC website: www.ors.od.nih.gov/ser/dpsac/Pages/Home.aspx (a.k.a., www.idbadge.nih.gov).

This site provides comprehensive information about Getting a Badge, Background Checks, HSPD-12, Resources and Forms, and Training. The main page also features updates and helpful tools, including videos on 'Using your PIV Card to Enter the NIH Campus'
and 'Getting an HHS ID Badge.'
   
ICs that want to add Lifecycle Work Station (LWS) operators to the approved roster -- send a written request to Richie Taffet at: taffetr@mail.nih.gov. Your request should include:
  • the new operator's name
  • his/her IC
  • his/her NED number
  • the operator's e-mail address, building/room and phone number
Once Mr. Taffet has approved the request, he will forward the name(s) to HHSIdentityAdmins@deloitte.com to complete the approval process, add the name(s) to the LWS operator roster, and inform the IC that the individual is now approved to operate the LWS.

Need to make changes to the LWS operator directories?
-- drop an e-mail to Lanny Newman,
newmanl@mail.nih.gov, and let him know what needs changing (e.g., adding new operators or LWS locations, removing operators, etc.). Remember, before a new operator can be added to the LWS directory, s/he must first be approved by Richie Taffet (see preceding Helpful Tip).

AOs who wish to obtain sponsor authority -- must complete the sponsor training (available at: http://www.ors.od.nih.gov/ser/dpsac/Training/Pages/administrators.aspx) and e-mail a copy of your signed certificate to the NIH HSPD-12 Program Office at hspd12@od.nih.gov. Upon receipt of the certificate, the Program Office will authorize the AO as a sponsor.  

If an LWS is not available in your IC or your immediate area, and you work in the greater Bethesda or Rockville area
-- please call 301-451-4766 or 301-402-9755 to schedule an appointment with the Division of Personnel Security and Access Control located in Building 31, Room B1A26 or in Building 10, South Lobby, Room 1C52.

If you work outside the Bethesda/Rockville area, contact your
local badge issuance office. You can find contact information for all badge issuance offices at: http://www.ors.od.nih.gov/ser/dpsac/Pages/contactinfo.aspx.


FAQs

Q. Some AOs I've spoken with are under the impression that DPSAC does not issue a badge to a short-term person without a Social Security Number, but the article you ran in the last DPSAC News, "Getting a Restricted Local Access (RLA) Badge - A Primer," seems to imply otherwise. It states:

"No Social Security Number:  Please be advised that DPSAC will NOT issue any type of ID badge to individuals without a Social Security Number (SSN) who plan to be working at NIH longer than six (6) months. Individuals without an SSN who fall into this category must access the NIH facilities as a daily visitor."

Can you please confirm that DPSAC policy is to issue badges to all short-term people for whom an AO requests and sponsors a badge in NED? (assuming of course, that DPSAC successfully adjudicates the individual).

A. You are correct. All short-term people (under 180 days) without an SSN will be processed for a badge automatically. DPSAC will issue badges to all short-term people for whom an AO requests and sponsors a badge in NED.


Q. I work at the NIH, but I need my daughter to drive me to work every day because I am not physically able to drive myself. I heard the process to obtain an extended visitor badge for my daughter has changed since 2014. What is that process?

 

A. Before visitors can be issued an ID badge giving them access to NIH facilities, they must complete the Extended Visitor form and the Administrative Officer with PIV Sponsor authority must approve the form. Applicants will have their photo taken and their fingerprints electronically captured and submitted through the Office of Personnel Management (OPM) for criminal history screening.

In the past, any federal employee could sponsor someone for an Extended Visitor Badge. This sponsorship capability is now limited to NED AOs who also hold the NED Sponsor role. As a result, NED AO Sponsors may now receive requests to approve Extended Visitor badges.

Please note that before a NED AO can sign off on the required Extended Visitor forms, s/he will need to hold the NED Sponsor role. AO Sponsors will be responsible for authorizing and sponsoring an individual to obtain employee-like access to NIH.

Sponsorship of non-NIH personnel will cost the sponsoring IC $21.50 per person based on OPM's FY '15 rates and must include a justification statement by the Sponsor as to why the individual requires employee-like access to the NIH campus.

The justification statement for sponsorship of non-NIH personnel for an Extended Visitor Badge must be mission-related and is subject to approval by the NIH Police. In the case you are describing, the AO should check "Transportation Visitor" on the form.

The new NIH Extended Visitor ID Badge Application form is posted at: http://security.nih.gov/Documents/Extended%20Visitor%20Form.pdf.

 


Avoiding "Inadvertent" Deactivation of NED Fellow Records
This article first appeared in the May 1, 2015 issue of DPSAC News

NED obtains data from the Fellowship Payment System (FPS) and applies automatic updates daily at 5:30 AM (except on Sunday and Monday). Automatic updates include the deactivation of NED fellow records the day after FPS indicates a fellow is no longer on an active award.  
 
In order to prevent NED from deactivating a fellow who will be staying on at NIH in a different capacity, an AO must reclassify the person to something other than fellow (e.g., NIH FTE, special volunteer) prior to the expiration of the FPS award.  

An AO can perform the NED reclassification any time after the first business day of the month in which the fellow's FPS award expires. For example, in the case of a fellow converting to NIH FTE whose FPS award expires on May 29, 2015, an AO can reclassify the person in NED any time between May 4 and May 29 to prevent the automatic deactivation of the NED record on May 30 at 5:30 AM.   
A biweekly e-newsletter from the Office of Research Services, Division of Personnel Security and Access Control (ORS/DPSAC) to keep you informed as NIH rolls out "Homeland Security Presidential Directive 12" (HSPD-12) establishing a common identification standard to better safeguard NIH and its workforce.