Report Card on Government's Compliance With Secure ID Mandate

The president called on all federal agencies to issue secure, smart ID cards to federal workers and contractors. So far, few of the cards have been issued, according to an analysis of published data.

By Sarah D. Scalet
Wed, June 13, 2007

CSO — Starting March 1, 2007, the White House Office of Management and Budget required that federal agencies post quarterly updates on their public websites reporting how far along they are in issuing the Personal Identity Verification (PIV) cards that allow them to comply with Homeland Security Presidential Directive 12, known as HSPD-12. (The PDF for this order is located here.) These smart cards are intended to provide employees and contractors both logical and physical access to government facilities.

There is no central clearinghouse for this information spread across the federal government. Below is our best attempt to locate the websites for those agencies and departments that have posted their latest updates. Those numbers indicate that while the number of PIV cards issued has more than doubled in the past three months, the government as a whole has issued only a small fraction of the cards required under the presidential mandate.

The table includes both March and June 2007 status reports and adds up the numbers.

Report Card on HSPD-12 Compliance

A Status Check on Federal Agencies' Issuance of Personal Identity Verification (PIV) Cards.

The following table shows the number of employees at each federal agency and department who require a PIV card and how many of them so far have received a card, according to reports posted by June 5, 2007.

DEPARTMENTS	EMPLOYEES REQUIRING PIV CARDS	CARDS ISSUED AS OF MARCH 1, 2007	CARDS ISSUED AS OF JUNE 1, 2007
Department of Agriculture	107,000	7	7
Department of Commerce	44,252	4	4**
Department of Defense (Has posted information on internal site, not publicly)	n/a	n/a	n/a
Department of Education	4,341	n/a	0
Department of Energy	13,618	5	5**
Department of Health and Human Services	n/a	n/a	n/a
Department of Housing and Urban Development	n/a	n/a	n/a
Department of Homeland Security	n/a	n/a	n/a
Department of Interior*	64,338	17	17**
Department of Justice	n/a	n/a	9
Department of Labor	15,473	11	382
Department of State	19,865	915	1,373
Department of Transportation	52,979	6	6**
Department of Treasury	122,292	5	6
Department of Veterans Affairs	241,000	430	763
Commission on Civil Rights	42	2	2**
Commodity Futures Trading Commission	454	5	5**
Consumer Product Safety Commission	401	401	4**
Environmental Protection Agency	17,000	14	856
Equal Employment Opportunity Commission	2,200	1	1**
Federal Energy Regulatory Commission	1,400	1	2**
Federal Communications Commission	1,800	11	11**
Federal Reserve Bank	1,935	2	5
Federal Maritime Commission	121	2	2**
Federal Trade Commission	1,089	3	3**
General Services Administration*	4,110	5	5**
Merit Systems Protection Board	230	4	4**
National Aeronautics and Space Administration	18,750	0	0
National Archives	3,051	3	3
National Credit Union Administration	949	1	1**
National Science Foundation	1,390	31	84
Nuclear Regulatory Commission	3,500	1	1**
Office of Federal Housing Enterprise Oversight	224	3	3**
Office of Personnel Management	5,568	2	2**
TOTAL (for both departments and independent agencies)	749,372	1,495	3,564
REFERENCE NOTES: Last updated June 5, 2007. * Both the Department of Interior and the General Services Administration are acting as shared service providers and issuing cards for other agencies. The numbers listed above do not include cards those agencies have issued to other agencies. In all, as of March 1, 2007, the Department of Interior National Business Center reported that it had issued 46 of the 73,761 cards it is required to issue; since then the report has been taken down from its website and not been replaced with a newer one. ** The required June 1, 2007, status report was not posted as of June 5, 2007. This chart is a work in progress. If you know of a public report that we have not yet located, please send us the URL so that we can include it. You can post feedback here.

You are here: Technology Topics » Security » News Feature

Most Recent Security Stories

White Papers »

Overcome Top 7 Admin Challenges of Active Directory

As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

Top Solutions and Tools to Prevent Devastating Malware

Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.

Insiders Can Ruin Your Company. Take Action.

Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

X-Ray of the PCI Process-4 Proactive Steps

This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

Streamline Compliance and Increase ROI

Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

Identity Governance: The Business Imperatives

This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make to help achieve project success.

Webcasts »

Gartner Next Generation Network IPS Webcast

Learn how Gartner's criteria for next generation IPS helps organizations achieve effective threat prevention despite changes in network communications, new applications, and changes in the threat landscape.

McAfee Continuous Compliance

3 minute Flash video - overview of the need for and value of Configuration Control.

Taming the Wild West: How to build a strong cloud security strategy

Cloud deployments are playing a critical role in propelling innovation for many companies. At the same time security has become the #1 one of the top concerns for IT and business leaders as they migrate into the cloud. In this webinar, learn from Accenture discusses how to recast the cloud as a "fresh chance to rethink your approach to security."

Virtualization Success is a Team Effort

As greater numbers of datacenter servers transition from the physical to the virtual world, the components of virtualization success come to the fore. What scores of organizations have discovered is that success is derived from an optimal pairing of the right software platform with the right hardware platform.

Customer Spotlight: How IPC The Hospitalist Company Implemented Oracle on VMware

Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn about VMware customer, Navicure, and their experiences testing and evaluating the recovery manager, their progress in implementing it in their environment and their advice other customers considering using vCenter.

Quantifying the Business Value of VMware View - Webcast

Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price efficiencies, improved IT management and greater agility and choice for end users.

This VMware sponsored webcast with IDC will provide both quantitative measurement of the business value -- defined as the expected ROI -- and qualitative analysis associated with the use of VMware View™. IDC will also provide an analysis of the View Composer and ThinApp™ features of VMware View, including the business value of these solutions and an overview of how they work.

Attend this webcast to learn about:
- Challenges and barriers that might impede the adoption of desktop virtualization
- Navigating roadblocks to facilitate a strategic implementation
- Optimizing qualitative and quantitative benefits to IT and your business

Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter