ISSUANCE OF LOGICAL ACCESS CREDENTIALS TO CERTAIN VOLUNTEER PERSONNEL:
RAAUZYUW RUEWMCS0001 1811300-UUUU--RUCRNAD ZNR UUUUU R 292136Z JUN 09 FM CNO WASHINGTON DC//N6// TO NAVADMIN INFO CNIC WASHINGTON DC//00/N6// BUPERS MILLINGTON TN//00/N1// COMNAVNETWARCOM NORFOLK VA//00// ZEN/SSC ATLANTIC CHARLESTON SC//00// UNCLAS //N5500// NAVADMIN 196/09 MSGID/GENADMIN/CNO WASHINGTON DC/N6// SUBJ/ISSUANCE OF LOGICAL ACCESS CREDENTIALS TO CERTAIN VOLUNTEER PERSONNEL// REF/A/DOC/OUSD (P&R) MEMO/14 AUG 08// REF/B/DODI 1100.21/26 DEC 02// NARR/REF A IS OUSD (P&R) MEMORANDUM ANNOUNCING VOLUNTEER CREDENTIAL PILOT PROGRAM. REF B IS DOD INSTRUCTION ON VOLUNTARY SERVICES IN DOD.// RMKS/1. THIS IS A COORDINATED CNO (N1), CNO (N6), CNNWC AND CNIC (N6) MESSAGE. 2. THE PURPOSE OF THIS NAVADMIN IS TO ANNOUNCE A PILOT PROGRAM TO ISSUE LOGICAL ACCESS CREDENTIALS TO DOD VOLUNTEERS HAVING A VERIFIED REQUIREMENT FOR ACCESS TO DOD COMPUTERS/NETWORKS IN ORDER TO FULFILL THEIR DESIGNATED SUPPORT MISSION. 3. THE NEW VOLUNTEER CREDENTIAL IS A PLASTIC SMART CARD WHICH WILL CONTAIN DOD PUBLIC KEY INFRASTRUCTURE (PKI) CERTIFICATES AND IS INTENDED FOR THE SOLE PURPOSE OF GAINING ACCESS TO DOD COMPUTERS/NETWORKS IN ORDER FOR THE VOLUNTEER TO FULFILL THEIR DESIGNATED MISSION. IT IS NOT A DOD COMMON ACCESS CARD (CAC) AND WILL NOT DISPLAY A PHOTO. IT DOES NOT CONVEY BENEFITS OR ENTITLEMENTS OR ANY OTHER PRIVILEGES, NOR CAN IT BE USED FOR PHYSICAL ACCESS PURPOSES. 4. THIS CARD WILL BE ISSUED AT A REAL-TIME AUTOMATED PERSONNEL IDENTIFICATION SYSTEM (RAPIDS) SITE (ID-CARD ISSUING SITE, NORMALLY A PERSONNEL SUPPORT DETACHMENT (PSD) OR PASS & ID OFFICE), AFTER THE VOLUNTEER HAS BEEN VETTED AND APPROVED FOR DOD SYSTEMS ACCESS AND ENTERED INTO THE CONTRACTOR VERIFICATION SYSTEM (CVS) BY AN AUTHORIZED TRUSTED AGENT (TA) OF THE SPONSORING COMMAND. PER REF A, UNDER NO CIRCUMSTANCES WILL A VOLUNTEER LOGICAL ACCESS CARD BE ISSUED TO A VOLUNTEER WHOSE DATA HAS NOT BEEN VERIFIED IN THE DEFENSE ENROLLMENT AND ELIGIBILITY REPORTING SYSTEM (DEERS). 5. VOLUNTEERS ARE DEFINED IN REFERENCE B AS INDIVIDUALS WHO DONATE THEIR SERVICES TO DOD COMPONENTS, INCLUDING NONAPPROPRIATED FUND INSTRUMENTALITIES (NAFI). ALL INDIVIDUALS INVOLVED IN GRANTING SYSTEM ACCESS MUST BE KNOWLEDGEABLE OF ELIGIBILITY REQUIREMENTS OF VOLUNTEER POPULATIONS. 6. ELIGIBILITY REQUIREMENTS FOR ISSUANCE OF LOGICAL ACCESS CREDENTIALS: A. BE A STUDENT INTERN (5 U.S.C. 3111), AN AUTHORIZED DOD VOLUNTEER (10 U.S.C. 1588) OR RED CROSS VOLUNTEER. B. REQUIRE FREQUENT ACCESS TO A DOD NETWORK TO PERFORM VOLUNTEER DUTIES. C. BE A U.S. CITIZEN. D. BE SPONSORED BY NAVY AS PART OF AN OFFICIAL VOLUNTEER ASSIGNMENT. E. BE REGISTERED IN DEERS THROUGH THE CVS. F. HAVE A NATIONAL AGENCY CHECK (NAC) INITIATED AS REQUIRED BY DOD 5200.2R FOR INDIVIDUALS REQUIRING NETWORK ACCESS FOR AUTOMATED DATA PROCESSING (ADP)-III POSITIONS (SYNONIMOUS WITH IT-III) AND HAVE A FAVORABLE COMPLETION OF THE AUTOMATED FBI NATIONAL CRIMINAL HISTORY CHECK (FINGERPRINT CHECK). NAC MUST BE FAVORABLE WHEN COMPLETED. G. AGREE TO BE PHOTOGRAPHED AND HAVE FINGERPRINTS TAKEN AND STORED IN THE VOLUNTEER'S DEERS RECORD. H. HAVE AN OFFICIAL NAVY EMAIL ACCOUNT ESTABLISHED. 7. PROGRAM ROLES AND RESPONSIBILITIES: A. OPNAV N6 MAINTAINS POLICY AND OVERSIGHT FUNCTIONS OF THE PILOT PROGRAM. B. BUREAU OF NAVAL PERSONNEL (BUPERS-26) DEERS/RAPIDS PROJECT OFFICE WILL ENSURE RAPIDS SITE SECURITY MANAGERS (SSMS) AND RAPIDS OPERATORS (VERIFYING OFFICIALS) ARE PROVIDED WITH INFORMATION CONCERNING ISSUANCE OF THE VOLUNTEER SMART CARD TO AUTHORIZED VOLUNTEERS. RAPIDS VERSION 7.4 WILL SUPPORT ISSUANCE OF THIS CARD AND RAPIDS 7.3 SITES WILL BE UPGRADED BEGINNING MARCH 2009. THE DEERS/RAPIDS PROJECT OFFICE WILL ENFORCE THE VOLUNTEER CREDENTIAL ISSUANCE POLICY. C. COMMANDER, NAVY INSTALLATIONS COMMAND (CNIC), CAC PROGRAM MANAGEMENT OFFICE, AS CVS PROGRAM MANAGER, WILL ISSUE PROCEDURES FOR 1) APPLYING FOR THE LOGICAL ACCESS SMART CARD; 2)COMPLETING VETTING REQUIREMENTS; 3) INPUTING, VERIFYING, AND APPROVING VOLUNTEER DATA INTO CVS; AND, 4) OVERSEEING CVS TRUSTED AGENT (TA) PERFORMANCE. D. SPONSORING COMMAND SECURITY MANAGER WILL: 1) ENSURE NAC IS INITIATED. 2) PERFORM THE FBI FINGERPRINT CHECK OR ENSURE FINGERPRINT CHECK HAS BEEN COMPLETED. 3) PROVIDE DOCUMENTATION TO THE RESPONSIBLE SPONSOR THAT NAC HAS BEEN INITIATED AND THE RESULTS OF THE FBI FINGERPRINT CHECK. E. VOLUNTEER SPONSORS. THE VOLUNTEER SPONSOR IS NORMALLY THE INDIVIDUAL IN THE DIRECT LINE OF SUPERVISION OVER THE VOLUNTEER. SPONSORS MUST: 1) BE A DOD UNIFORMED SERVICE MEMBER OR DOD CIVILIAN EMPLOYEE. 2) BE CAPABLE OF SENDING AND RECEIVING DIGITALLY SIGNED AND ENCRYPTED EMAIL. 3) POSSESS A VALID COMMON ACCESS CARD (CAC). 4) DETERMINE VALIDITY OF REQUEST AND VERIFY REQUIREMENT FOR VOLUNTEER TO HAVE LOGICAL ACCESS TO THE DOT MIL DOMAIN TO EFFECTIVELY EXECUTE MISSION. COMPLETE SYSTEM AUTHORIZATION ACCESS REQUEST NAVY (SAAR-N) AND OBTAIN SIGNATURE OF AUTHORIZED INFORMATION ASSURANCE REPRESENTATIVE (I.E. INFORMATION ASSURANACE MANAGER (IAM)). ENSURE THE ANNUAL INFORMATION ASSURANCE AWARENESS TRAINING IS COMPLETED BY THE VOLUNTEER. 5) ENSURE THE VOLUNTEER HAS THE NAC INITIATED AND FAVORABLE FBI FINGERPRINT COMPLETED AND THAT THE ASSOCIATED DOCUMENTATION HAS BEEN FORWARDED TO THE TA. 6) FORWARD VOLUNTEER REGISTRATION REQUEST AND DOCUMENTATION FROM THE SECURITY MANAGER TO CVS TA IN A DIGITALLY SIGNED AND ENCRYPTED EMAIL. 7) RETRIEVE VOLUNTEER CARD AND RETURN TO A RAPIDS SITE WHEN THE CARD IS NO LONGER REQUIRED. F. CVS TRUSTED AGENT (TA): 1) PROCESS REGISTRATION REQUESTS FOR VOLUNTEER LOGICAL ACCESS CREDENTIAL AND ENTER APPROPRIATE DATA INTO CVS. 2) MAINTAIN DIGITALLY SIGNED EMAIL FROM VOLUNTEER SPONSOR WITH THE REGISTRATION REQUEST FOR ALL VOLUNTEERS ENTERED INTO CVS. G. COMMANDING OFFICERS/OFFICERS IN CHARGE/DEPARTMENT HEADS AND OTHER AUTHORIZED INDIVIDUALS ACCEPTING VOLUNTEER SERVICES: 1) ASSIGN A TA FOR ENTERING VOLUNTEER DATA INTO CVS, IF A TA IS NOT ALREADY APPOINTED WITHIN YOUR COMMAND. 2) ENSURE REQUIREMENTS FOR ACCESS TO DOD COMPUTERS AND SYSTEMS ARE VALID. ACCESS TO DOD INFORMATION SYSTEMS MUST BE BASED ON DEMONSTRATED NEED TO KNOW REASONING AND GRANTED IN ACCORDANCE WITH DOD 5200.2R. GRANTING ACCESS TO DOD COMPUTERS AND SYSTEMS TO PERSONNEL WHO HAVE NOT BEEN PROPERLY VETTED IS A VIOLATION OF THE COMPUTER FRAUD AND ABUSE ACT OF 1986 (TITLE 18 U.S.C SECTION 1830 - AMENDED IN 1994, 1996 AND 2001 BY THE PATRIOT ACT.) VIOLATIONS OF THIS ACT CAN RESULT IN CIVIL AND/OR CRIMINAL ACTIONS FOR COMPENSATORY AND PUNITIVE DAMAGES. 8. VOLUNTEER LOGICAL ACCESS CREDENTIALS WILL BE ISSUED FOR THREE YEARS OR THE PROJECTED END DATE OF THE VOLUNTEER'S MISSION, WHICHEVER OCCURS FIRST. 9. DETAILED CVS PROCEDURES TO INCLUDE SPECIFIC DOCUMENTATION REQUIRED WILL BE FORTHCOMING FROM CNIC CAC PROGRAM MANAGEMENT OFFICE (PMO) AND POSTED ON THE CAC PMO WEBSITE AT HTTP:(SLASH) (SLASH)PMO.CAC.NAVY.MIL. 10. THIS NAVADMIN EXPIRES ON 14 AUGUST 2011. 11. POINTS OF CONTACT: FOR POLICY QUESTIONS CONCERNING LOGICAL ACCESS REQUIREMENTS AND PKI ISSUES: MR. ROBERT WEILMINSTER (OPNAV N6F5211), (703) 601-1264. FOR RAPIDS SITES: BUPERS DEERS/RAPIDS PROJECT OFFICE, MRS. LAWANDA BING (901) 874-3467/DSN882 ; PSC WORFOLK (901) 874-3482; OR, MR. LINDEN BUTLER (901) 874-4862. FOR PROCEDURES, TASM AND TA SPONSORING PERSONNEL: CAC PMO DONNA FREEDMAN (850)452-7705. 12. RELEASED BY VADM HARRY B. HARRIS, JR., DCNO COMMUNICATION NETWORKS OPNAV (N6)// BT NNNN