Protecting Government Facilities and Systems

Many forms of identification that federal employees and contractors use to access government-controlled buildings and information systems can be easily forged, stolen, or altered to allow unauthorized access. Homeland Security Presidential Directive 12 (HSPD-12) aims to increase the quality and security of federal credentialing practices by requiring the use of a new standardized and secure credential.

  • OMB is responsible for ensuring agencies successfully implement this directive.
  • However, OMB’s approach to overseeing agencies’ implementation has not encouraged the best use of the new credentials’ electronic authentication capabilities.

    Highlights of GAO-08-292 (PDF)

  • Additionally, OMB has not

    • treated the implementation of HSPD-12 as a major new investment, or

    • ensured that agencies have guidance to consistently and appropriately implement the electronic authentication capabilities across agencies for physical and logical access.

      Highlights of GAO-08-292 (PDF)

^ Back to topWhat Needs to Be Done

In order to achieve HSPD-12’s objectives of increasing the quality and security of ID and credentialing practices across the federal government, the program’s focus needs to shift to implementing the full capabilities of the new credentials.

Highlights of GAO-08-292 (PDF)

 To do so, OMB should

  • set realistic milestones for implementation of electronic authentication capabilities, and
  • require that each agency develop detailed plans regarding the extent to which it will implement these capabilities.

^ Back to topKey Reports

Employee Security

Electronic Government

Electronic Government

More Reports More Results Toggle
GAO Contact
portrait of Joel C. Willemssen

Joel C. Willemssen

Managing Director, Information Technology

willemssenj@gao.gov

(202) 512-6253