• Decrease
  • Normal
  • Increase
U.S. Department of Health and Human Services

About FDA

Identity and Access Management (IAM@FDA) (1)

Description: On August 2004, President Bush issued Homeland Security Presidential Directive 12 (HSPD-12) mandating new standards for secure and reliable personal identification for all federal employees and contractors. HSPD-12 mandates that all Federal agencies develop and deploy an identification verification system to provide personal identity verification (PIV) credentials to all personnel. PIV badges are a standardized Federal ID badge that allows an employee or contractor to gain access to Federal facilities and information technology systems while providing enhanced security. HHS established a number of programs to comply with this directive including the Federal Identify, Credential, and Access Management (FICAM) Roadmap, and the Identity and Access Management Program (IAM@HHS). In order to achieve the goals of HSPD-12, FICAM, and IAM@HHS,FDA established the IAM@FDA program. This program focuses on Logical Access Controls (LACS), Physical Access Controls (PACS), and the mechanisms to generate and maintain the credentials necessary for every person within the FDA, allowing secure access to buildings, computer rooms, and applications within the Agency, HHS, and potentially with our external public customers.

Accomplishment: The IAM@FDA Program has enabled FDA to transfer most users at the FDA from ID and Password to PIV card authentication. This change eliminates the need to remember multiple passwords and increases secure access to FDA information through the use of two-factor authentication methods. It has also changed the remote user access from ID/Password login to PIV login which required a change in remote access systems and has resulted in a more reliable connection method. The program has established encrypted email capability and user guides which allows confidential information to be sent through email in a secure, encrypted manner, and has established the ability for FDA employees to digitally sign documents using the PIV card. Digital signatures will allow for more efficient completion of the workflow processes that require signatures. For additional information please visit www.idmanagement.gov.

Briefing Status: COMPLETED

Prior Briefing Status: ON TRACK

Milestone DescriptionMilestone DateMilestone StatusMilestone Completion Date

A. PIV-enable all the network access from regulatory computer users

9/30/2011

Completed 9/30/2011

B. Complete FDA IAM agency application implementation plan and roadmap

9/30/2011

Completed 9/30/2011

C. Implement Virtual Private Network (VPN) utilizing the PIV card for authentication

12/30/2011

(6/15/2012)

Completed 8/1/2012

D. Implement email encryption utilizing the PIV card for authentication

2/29/2012

Completed 2/29/2012

E. Implement digital signature utilizing the PIV card for authentication

4/30/2012

Completed 8/1/2012

Footnotes

  • (1) The dates in italics under the milestone due dates are modified milestone due dates which had to be updated due to real-time delays. The milestone status reflects the revised dates.

Key Projects Legend

Milestone StatusDefinition
Not Yet StartedWork for specific milestone has not yet been started.
CompletedMilestone and/or overall project is completed.
On TrackMilestone - On track for completion by milestone deadline. Quarter status - Project is on track for completion based on overall milestone status.
On HoldMilestone - On hold, but deadline for completion has not passed. Quarter status - Project is on hold, based on overall milestone status.
DelayedMilestone - Delayed as it has not been completed and deadline has passed. Quarter status - Project is delayed based on overall milestone status.

Glossary

Note: The data provided on this website is produced on an ongoing basis for performance management purposes and is subject to change due to updates of preliminary estimates, corrections, or other reasons. In addition, FDA may change the type or amount of data provided on this website at any time. Information marked as "Completed" may include measures and/or key projects for which activities are ongoing but no longer tracked as part of FDA-TRACK.