IBIA

TSA bill requires competition
Publisher: Washington Technology
Jun 08, 2009

House says fingerprint contract must be competed

Bill aims to speed frequent fliers through security
Publisher: Federal Computer Week
Jun 08, 2009

The agency would be more involved in the traveler registration program.

Obama turns to tech tools to carry out vision
Publisher: Washington Technology
Jun 08, 2009

Budget documents, cybersecurity review reveal key trends

Security pros find cyberspace review lacking
Publisher: Government Computer News
Jun 08, 2009

The Cyberspace Policy Review unveiled last month by President Barack Obama, and the creation of a new cybersecurity coordinator position, though a positive step, is lacking in the details, according to several industry security experts.

Administration plans to pick up the pace on stimulus spending
Publisher: Government Executive
Jun 08, 2009

The White House on Monday announced plans to accelerate implementation of the economic stimulus package during next three-plus months, as critics said the administration missed some targets for initial Recovery Act spending.

Arkansas Correction officials probe badges in escape
Publisher: Baxter Bulletin
Jun 09, 2009

Correction officials are looking into whether real or fake identification badges were used by two convicted killers who fled an Arkansas prison wearing guard uniforms.

Tale of two Smart Grid bills
Publisher: Government Computer News
Jun 15, 2009

Reps. Barrow and Thompson take different approaches to upgrading the electrical grid.

Biometric security wave of future
Publisher: Edmonton Sun
Jun 09, 2009

The federal government plans to start fingerprinting applicants for temporary resident permits as early as 2011, Sun Media has learned.

West Virginia Biometrics/Identity Management Reception in Washington, DC, on June 17th
Publisher: www.drwvfoundation.org
Jun 08, 2009

Initial List of Smart Grid Interoperability Standards; Request for Comments
Publisher: Federal Register
Jun 09, 2009

The National Institute of Standards and Technology (NIST)seeks comments on a preliminary set of smart grid interoperability standards and specifications identified for inclusion in the Smart Grid Interoperability Standards Framework, Release 1.0.

Frost & Sullivan Presents LG Electronics IRIS With the 2009 Global Iris Recognition Biometrics Market Customer Value Leadership of the Year Award
Publisher: Webnewswire.com
Jun 08, 2009

Frost & Sullivan selected LG Electronics, Iris Technology Division (LG IRIS) as the recipient of its 2009 Global Iris Recognition Biometrics Market Customer Value Leadership of the Year Award.

SAFRAN Group secures PIV approval
Publisher: Security Document World
Jun 08, 2009

TSA bill requires competition
Publisher: Washington Technology
Jun 08, 2009

By Alice Lipowicz

Despite a lobbying effort by airport executives, the Transportation Security Administration reauthorization bill that passed the House on June 4 retained a provision to require full and open competition for security background screening services for aviation workers.

Under the measure, TSA must seek competitive bids for the first time to process and transmit biometric fingerprint data needed for background checks on millions of aviation employees.

Since 2001, the work has been performed by the Transportation Security Clearinghouse, an entity owned by the American Association of Airport Executives, which was designated by TSA as the sole provider to perform that work. The clearinghouse collects fees from the aviation workers, currently $27 per worker.

Under H.R. 2200, Section 233, TSA would be required to publish a notice in the Federal Register stating that airports may use any qualified provider for these services and must disclose the technical requirements.

Biometric executives supported the provision. “If this provision becomes law, all International Biometric Industry Association member companies (as well as non-member companies) that meet the requirements of TSA would have a chance to compete to provide these services to airports,” said Tovah LaDier senior vice president, said in a statement dated June 5. She said the association would continue to promote the provision’s incorporation in a Senate bill.

Executives at more than 80 airports urged Congress to consider the risks of putting the work up for competition. “While competition in this area is a worthy goal, it must not come at the expense of a process that works well and that has served our industry and the cause of aviation security admirably for nearly eight years,” the executives wrote June 2 in a letter to the chairmen and ranking members of the House Homeland Security and Transportation committees.

Bill aims to speed frequent fliers through security
Publisher: Federal Computer Week
Jun 08, 2009

By Alice Lipowicz

Legislation to reauthorize the Transportation Security Administration passed by the House strengthens the TSA’s role in the Registered Traveler program for frequent fliers, a business group says.

Registered Traveler is run by private vendors in cooperation with TSA and airports. It offers airline travelers a chance to avoid long lines at security by using designated security lanes. Members enroll and undergo a vetting process in advance and then display an identification card and verify a fingerprint or iris at the participating airport. The travelers pay an annual fee for the benefits.

Under a provision in the House bill approved June 4, TSA would be required to consider how Registered Traveler can be integrated into "risk-based aviation security operations," according to the National Business Travel Association (NBTA). TSA also must reinstate security threat assessments and background checks for Registered Traveler participants and review screening protocols "to realize the full potential of the Registered Traveler Program," the association said.

“NBTA has supported the Registered Travel program since before its inception and has pushed for improvement and expansion over the years. I urge the Senate to take up this bill with included [Registered Traveler] language to not only improve TSA’s security mission, but also to provide greater efficiency to business travelers throughout the nation,” NBTA President Kevin Maguire said June 5.

Verified Identity Pass Inc., which has signed up more than 260,000 travelers through Registered Traveler, said it also supports the provision.

Obama turns to tech tools to carry out vision
Publisher: Washington Technology
Jun 08, 2009

By Bill Loomis

Wall Street is worrying about the climbing record federal budget deficit, which is starting to drive long-term interest rates higher and prompt growing fears of inflation. Based on the past, the omnibus spending bill, fiscal 2009 budgets and the fiscal 2010 request from President Barack Obama, the government will not be cutting back over the next couple of years.

Budgets will likely get tighter as the economy improves, and the president and Congress feel pressure to reduce the deficit in fiscal 2011. Defense may be hit particularly hard, assuming there are no significant new troop deployments. But I believe even in this difficult budget environment, the outlook for federal information looks strong. Two documents released in May offer evidence about how the Obama administration regards information technology as a key factor in moving its agenda forward and not a cost-savings opportunity: the fiscal 2010 IT budget request and the 60-day cybersecurity review.

On May 11, the Office of Management and Budget released details of the president’s fiscal 2010 IT spending request. Although the overall federal IT spending growth in fiscal 2010 is 3.9 percent — in line with what I expected on a percentage basis — it was growth off of a fiscal 2009 IT budget that ended up more than $2 billion above President George W. Bush’s request a year ago. Even with the higher fiscal 2009 base, the fiscal 2010 civilian IT budget is requested to grow 4.3 percent, and defense requests 3.4 percent.

Along with the numbers, Obama provided commentary on several key initiatives to improve government efficiency, reduce costs and improve citizen service. These include more extensive use of cloud computing and Web 2.0 tools to improve transparency, accountability, public participation, collaboration, citizen involvement and IT infrastructure upgrades. He wants to make federal information more accessible to the public through several Web sites, such as usaspending.gov (for data on spending and its effectiveness), data.gov (for public access to government data), and recovery.gov (for information on stimulus funds).

The president views Web 2.0 technologies such as syndicated feeds, video sharing, podcasts, social networking, bookmarking, widgets, virtual worlds and micro-blogs as a path toward greater effectiveness and better decision-making because citizens are more able to participate in the government process.

The federal government plans to take a closer look at its technology infrastructure through its infrastructure modernization program, which it expects can lead to cost savings by making the government more efficient and effective. Cloud computing is cited in the budget as one of its major IT initiatives, allowing the federal government to transform its IT infrastructure by virtualizing data centers, consolidating data centers and operations.

Also, at end of May, Obama released the cybersecurity review and announced the White House will have a new cybersecurity policy position. This review created a road map for the cybersecurity policy official to follow, but offered no specifics or answers to the key issues, and offered no budget numbers. However, the president reiterated that cybersecurity is a national security priority for the country. With IT taking such an important role in moving the president’s agenda forward, I believe the outlook for IT budgets is good, despite dark federal budget clouds on the horizon.

Security pros find cyberspace review lacking
Publisher: Government Computer News
Jun 08, 2009

By Jabulani Leffall

The Cyberspace Policy Review unveiled last month by President Barack Obama, and the creation of a new cybersecurity coordinator position, though a positive step, is lacking in the details, according to several industry security experts.

The 76-page Cyberspace Policy Review report (PDF) found that America's current architecture in the public and private sector lacks both "security and resilience."

"Without major advances in the security of these systems or significant change in how they are constructed or operated, it is doubtful that the United States can protect itself from the growing threat of cyber crime and state-sponsored intrusions and operations," the report said.

Software security experts already working in the trenches had a few pointers to add.

Chris Schwartzbauer, senior vice president of Shavlik Technologies, said via e-mail that the report doesn't have "enough focus on where the threat is coming from, nor [on] reducing the response time to those threats." Such a focus would better help with any defensive measures taken, he added.

"Our government can lead the way here by setting some basic security standards like the FDCC, Federal Desktop Core Configuration," Schwartzbauer said. "FDCC focuses on the basics of controlling and protecting the systems on our nation's networks."

Phil Lieberman, president of Lieberman Software, criticized the report on the legal front.

"There needs to be a bright line of reasonable care for enterprises as well as incentives to implement strengthened cybersecurity," Leiberman said. "The statement needs to go further and provide a legal safe harbor for organizations that implement security and also a waiver of liability for those organizations that share breach information."

Other security pros feel that the acute need for cybersecurity mandates participation at all levels, especially because of the government's pervasive use of private industry. Indeed, page 17 of the report calls for public-private partnerships. It also recommends collaboration between state and local governments, as well as with academic circles.

"A multi-pronged attack will be required," said Randy Abrams, ESET's Director of Technical Education. "The cybercriminals are very well organized. A modicum of security is unattainable if the government as well as the private sector does not learn to organize to combat the threat."

ESET recently established a Securing Our eCity portal to help consumers with cybersecurity issues. The company cites a national poll of 1,000 U.S. adults, conducted by Competitive Edge Research and Communication Inc., in which 65 percent said they would favor increased governmental involvement in cybersecurity. It's a very timely finding, Abrams said.

Obama said a search is being conducted for a "cybersecurity coordinator" who will identify key threat areas. How much power and leeway that person will have remains to be seen, but challenges lie ahead.

"The challenges facing a cyber czar are complex because the backbone of the Internet itself, and the majority of Internet infrastructure, is in the hands of the private sector," said Abe Kleinfeld, CEO of security firm nCircle.

Kleinfeld wondered whether the new coordinator will have the power to quickly "mobilize defenses against any serious cyberattack."

"And if (he/she) does, who would he call to protect assets that are in the hands of the private sector? Would the private sector, whose success has been determined by innovation and invention, be willing to take orders from the public sector when it is widely perceived to be far behind in the area of cybersecurity?"

Coordinating the number of parties involved poses a steep challenge.

"This distribution of assets makes the Internet more resilient, but it also makes it a challenge to defend," Kleinfeld said. "A program that would provide substantive protection for U.S. Internet assets would require a deep partnership between the public and private sectors, and any kind of security cooperation on this scale has yet to be achieved."

Administration plans to pick up the pace on stimulus spending
Publisher: Government Executive
Jun 08, 2009

By Robert Brodsky

The White House on Monday announced plans to accelerate implementation of the economic stimulus package during next three-plus months, as critics said the administration missed some targets for initial Recovery Act spending.

During a morning Cabinet meeting, Vice President Joe Biden highlighted 10 major Recovery Act initiatives that will begin in earnest within the next 100 days, including hiring or keeping employed about 5,000 police officers, creating 125,000 summer jobs for youth and cleaning up 20 environmentally contaminated Superfund sites. The upcoming projects, listed on the White House Web site, also are intended to make long-term infrastructure improvements to 107 national parks, 98 airports, 90 veterans medical centers and more than 1,500 highways.

"We're going to do it continuing to operate in a transparent fashion so that taxpayers know this money is not being wasted on a bunch of boondoggles," President Obama said.

The administration expects to save or create 600,000 jobs in the second 100 days of Recovery Act implementation. The White House said at least 150,000 jobs were saved or created during the first 100, but those figures are based on a macroeconomic formula rather than hard data.

"It's about pace on the ball," Biden said. "Every 100 days, if we're doing this right ... should produce more than the last 100 days."

House Minority Leader John Boehner, R-Ohio, said the administration is doubling down on a "bloated government spending scheme." Rep. Darrell Issa, R-Calif., ranking member of the House Oversight and Government Reform Committee, noted the Obama team still lacks a "reliable mechanism ... to track and monitor stimulus spending."

Meanwhile the Reston, Va., research firm INPUT late last week released a report card on the first 100 days of stimulus spending, indicating mixed results on the goals of issuing Recovery Act contracts competitively and through fixed-price arrangements.

INPUT found that nearly 90 percent of stimulus procurement spending has been channeled through competitive awards. Most contracts issued have been fixed-price arrangements, but they are generally of smaller value, representing only18 percent of the total procurement spending, according to the report. Larger contracts typically have been cost-plus or time and materials awards -- vehicles Obama has criticized for cost overruns in Iraq and Afghanistan.

The report also noted that only 11 percent of $3.9 billion in federal Recovery Act contract actions through May 27 went to small businesses. One explanation, according to INPUT chief executive officer Tim Dowd, is that a high percentage of contracts have been for Environmental Protection Agency cleanup projects or Energy Department research -- both of which generally favor large companies. Most of the shovel-ready transportation contracts involving smaller firms were awarded by state and local governments, and that data will not be available until October.

The Recovery Act did not set a specific goal for small business contracting, but the administration has strongly encouraged agencies to reach out to smaller firms. The annual governmentwide small business contracting goal is 23 percent.

In addition, while most contracts were awarded competitively, many went to companies that had pre-existing agreements with agencies, INPUT found. Federal procurement data showed that 94 percent of federal contracts issued thus far have been awarded against deals that predated the stimulus. The Recovery Act allows the use of pre-existing contracts, but their prevalence in the early stages indicates that "if you are not an existing player ... then it gets steeper to climb that hill and get some of that business," Dowd said.

Procurement observers said pre-existing contracts help relieve the burden on the acquisition workforce but do little to improve competition and decrease prices.

"The political pressure is to get the money out the door and these existing vehicles are the path of least resistance," said Jaime Gracia, a senior associate with Octo Consulting Group in Vienna, Va. and the author of a blog on acquisition issues. "But, transparency, accountability and being good stewards of taxpayer dollars are not served using existing contracts."

INPUT gave the administration a grade of C- for contracting effectiveness and B+ for speed of spending.

The industry group was significantly harsher in its transparency assessment, giving the administration a grade of D due to incomplete guidance from the Office of Management and Budget and the scarcity of hard spending data on Recovery.gov. The administration also received an "incomplete" for job creation, with INPUT noting the lack of a formula for indirect jobs established.

"It is doubtful that the American people will ever know exactly how many jobs are created or preserved by the [Recovery Act]," the report concluded.

Arkansas Correction officials probe badges in escape
Publisher: Baxter Bulletin
Jun 09, 2009

LITTLE ROCK (AP) — Correction officials are looking into whether real or fake identification badges were used by two convicted killers who fled an Arkansas prison wearing guard uniforms.

Correction Department spokeswoman Dina Tyler said Monday that Calvin Adams and Jeffrey Grinder have been cooperating with investigators since they've returned to the state during the weekend. Adams and Grinder escaped from the Cummins Unit prison May 29 and were captured last week in New York. They are now being held at Varner Supermax prison.

Adams and Grinder were found with badges that looked like staff identification cards, but Tyler said they don't know yet if they were real or fakes. Tyler said investigators are probing whether the escapees altered inmate badges to look like staff IDs.

"They had badges. What we're trying to determine now is whether they were real and where they came from," Tyler said. "There's a very real possibility that the badges could have been altered."

Tyler said the escape has ramped up the state's plan to use a biometric system that scans thumbprints for entry and exit to the state's larger systems.

The plan had been originally to use the system for visitors only, but it will also include thumbprint scanning for staff, she said.

Among jobs for inmates at the Cummins Unit 90 miles southeast of Little Rock is making uniforms for jail guards and law officers. Video shows that the men put on the uniforms in the prison library after Friday's 6 p.m. headcount and walked out of the prison unchallenged during a shift change, Tyler said.

Correction officials are investigating how the inmates got the uniforms and how they were able to leave the facility unchecked.

Grinder and Adams drove away in a car that was left for them. Arkansas State Police have arrested three people accused of leaving the car for the two men.

Five correction employees remain on unpaid leave while the department investigates the escape, Tyler said.

Tale of two Smart Grid bills
Publisher: Government Computer News
Jun 15, 2009

By William Jackson

At least two bills have been introduced in the House to revamp security regulation of the nation’s power grid.

Officials at the Federal Regulatory Commission, which has the responsibility of regulating the power grid, have complained that current laws do not allow timely, flexible security standards and leaves the grid vulnerable to cyberattack in a quickly evolving, increasingly networked environment.
H.R. 2165, the Bulk Power System Protection Act of 2009, was introduced April 29 by Rep. John Barrow (D-Ga.). H.R. 2195 was introduced April 30 by House Homeland Security Committee chairman Rep. Bennie Thompson (D-Miss). A companion bill to Thompson's legislation, S. 946, was introduced in the Senate April 30 by Sen. Joseph Lieberman (I-Conn.).

The House bills are similar, but a comparison of the two by the Homeland Security Committee highlights their differences:

The Homeland Security Department's role:

H.R. 2165 does not specify a role for DHS.

H.R. 2195 requires DHS to assess cyber vulnerabilities or threats to electric infrastructure and recommend ways to mitigate them. It also would play the lead role in identifying threats or vulnerabilities requiring immediate protective actions. DHS currently plays a major role in control system cybersecurity, funding the Control Systems Security Program at DOE’s Idaho National Laboratory at $25 million a year.

Scope:

H.R. 2165 covers the Bulk Power System, defined in the Federal Power Act as generation and high voltage transmission systems and not including distribution substations and lower voltage networks that distribute electricity to customers. Alaska, Hawaii, and Guam are specifically excluded from reliability regulations, as are many major cities and population centers such as New York and Washington.

H.R. 2195 covers all “critical electric infrastructure,” defined in the legislation as generation, transmission, distribution and metering infrastructure.

Standards to protect against current vulnerabilities:

H.R. 2165 requires FERC, in consultation with Mexico and Canada, to establish measures to protect against specific vulnerabilities and “related remote access issues.” FERC may issue orders to grid operators to incorporate these measures, subject to notice and comment, until the North American Electric Reliability Corp., the standards setting body, adopts mandatory standards that replace interim FERC orders.

H.R. 2195 requires FERC, in consultation with DHS, to supplement any cybersecurity standards that are determined to be inadequate against known vulnerabilities or threats. These orders can be replaced by subsequent measures adopted by NERC.

Orders for future threats:

Under H.R. 2165, a written directive from the president that a cyberattack is pending will require FERC to issue emergency orders within 30 days to owners, users and operators of the bulk power system or any regional entity. This emergency order would be discontinued if the president, the secretary of Energy or FERC finds that the threat no longer is imminent; when a replacement standard is adopted; or after one year if the threat has not been reaffirmed.

H.R. 2195 requires DHS to perform ongoing vulnerability and threat assessments to critical electric infrastructure and recommend mitigations to FERC. FERC may issue mitigation orders if it finds that a threat is imminent. These orders apply to any owner or operator of generation, transmission, distribution or metering systems and are effective for 90 days unless continued by FERC.

Protection of information:

H.R. 2165 requires FERC to issue rules and procedures for protecting unclassified sensitive cybersecurity information from disclosure. These rules would not prevent FERC from disclosing this information on a need to know basis. The bill contains a list of requirements for the handling of this information.

H.R. 2195 uses the Homeland Security Act’s “Protected Critical Infrastructure Information Program” to protect information and exempt information submitted to FERC from the Freedom of Information Act and state and local disclosure laws.

Providing assistance to industry:

H.R. 2165 requires the Energy secretary to establish a program to develop expertise in electric grid cybersecurity within the industry.

H.R. 2195 has no similar provision in, although the Homeland Security Committee would argue that an existing DHS program to secure control systems should be expanded rather than re-established at DOE.

Defense facilities:

H.R. 2165 requires Alaska, Hawaii and Guam to prepare plans to protect facilities providing electricity to defense facilities from imminent cyberattack. (The definition of Bulk Power System does not include these states and territories.)

H.R. 2195 would cover these assets without a specific provision. The bill also would cover cities such as New York and Washington, which are also outside the scope of the Bulk Power System.

Biometric security wave of future
Publisher: Edmonton Sun
Jun 09, 2009

By Elizabeth Thompson, National Bureau

The federal government plans to start fingerprinting applicants for temporary resident permits as early as 2011, Sun Media has learned.

By 2013, all prospective temporary residents, including those who apply for work permits or study permits, will have to submit fingerprints and photographs.

In a request for information issued to potential contractors, the immigration department says it wants to collect biometric information because the rise of identity fraud means traditional ways of identifying people are no longer good enough.

"Current screening tools, which rely on biographic information, are no longer accurate, as documents can be easily stolen or altered, resulting in multiple or false identities," officials wrote.

"In contrast, biometrics can be used to uniquely identify and reliably verify an individual."

PILOT PROGRAM

According to the document, a 2006 pilot project was successful. The 2008 budget provided $26 million over two years for the initiative. Treasury Board gave preliminary approval in March and "effective project approval" is expected by March 2010.

By late 2011, the department plans to require fingerprints from 15% of prospective temporary residents. That will increase to 50% in 2012 and 100% in 2013 -- about 1.6 million people.

While they're starting with fingerprints, the department is thinking of adding facial recognition in the future. Biometric data collected will be stored at a central hub in Canada. Fingerprints will be checked by the RCMP.

Biometrics are popular with security officials and with Immigration Minister Jason Kenney, who says Canada trails Australia and the United Kingdom in using the technology.

West Virginia Biometrics/Identity Management Reception in Washington, DC, on June 17th
Publisher: www.drwvfoundation.org
Jun 08, 2009

Senator John D. Rockefeller IV and Governor Joe Manchin III are hosting a special reception for biometrics, identity management, and security executives at the Hyatt Regency Capitol Hill Hotel, 400 New Jersey Ave., NW, Washington, DC, at 6:00 pm on June 17th. This is a follow-up to last year’s highly successful event, and will offer opportunities to explore business partnerships, research synergies, and investment opportunities in West Virginia with the approximately twenty West Virginia companies and universities in attendance. The reception is being co-sponsored by the Discover the REAL West Virginia Foundation, West Virginia Development Office, and the I-79 Development Council’s West Virginia Biometrics Initiative. To secure your attendance, you may contact Sara Dearing or Brandi Hudson at (304) 345-0700, or sdearing@drwvfoundation.org.

Initial List of Smart Grid Interoperability Standards; Request for Comments
Publisher: Federal Register
Jun 09, 2009

[Federal Register: June 9, 2009 (Volume 74, Number 109)]
[Notices]
[Page 27288-27289]
From the Federal Register Online via GPO Access [wais.access.gpo.gov]
[DOCID:fr09jn09-25]

------------------------------------------------------------

DEPARTMENT OF COMMERCE

National Institute of Standards and Technology

[090520915-9921-01]

Initial List of Smart Grid Interoperability Standards; Request for Comments

AGENCY: National Institute of Standards and Technology (NIST), Department of Commerce.

ACTION: Notice; request for comments.

------------------------------------------------------------

SUMMARY: The National Institute of Standards and Technology (NIST)seeks comments on a preliminary set of smart grid interoperability standards and specifications identified for inclusion in the Smart Grid Interoperability Standards Framework, Release 1.0.

DATES: Comments must be received on or before July 9, 2009.

ADDRESSES: Written comments may be sent to: George Arnold, 100 Bureau Drive, Stop 8100, National Institute of Standards and Technology, Gaithersburg, MD 20899-8100. Electronic comments may be sent to: smartgridcomments@nist.gov.

The list of proposed standards and specifications is available at: http://www.nist.gov/smartgrid/standards.html. Additional information may be found at: http://www.nist.gov/smartgrid.

FOR FURTHER INFORMATION CONTACT: George Arnold, 100 Bureau Drive, Stop 8100, National Institute of Standards and Technology, Gaithersburg, MD 20899-8100, telephone (301) 975-5627.

SUPPLEMENTARY INFORMATION: Section 1305 of the Energy Independence and Security Act (EISA) of 2007 (Pub. L. 110-140) requires the Director of the National Institute of Standards and Technology (NIST) "to coordinate the development of a framework that includes protocols and
model standards for information management to achieve interoperability of smart grid devices and systems." NIST has identified an initial set of standards and specifications listed in the box below for inclusion
in Release 1.0 of the Smart Grid Interoperability Standards Framework.

Release 1.0 is a work in progress. It is not complete, nor is it exclusionary. Existing standards that do not appear in this first installment to Release 1.0 have not been eliminated from consideration.

Standards that currently appear on the list ultimately may not be included.

This initial set of standards represents the first step in Phase I of the NIST three-phase plan for smart grid interoperability. The full plan is available at: http://www.nist.gov/public_affairs/smartgrid_
041309.html.

To assist in carrying out its plan, NIST awarded a contract to Electric Power Research Institute (EPRI) to organize and facilitate two workshops, held on April 28-29, 2009 and May 19-20, 2009. Under its contract, EPRI is also required to use its technical expertise to compile, distill, and organize stakeholder contributions into a draft interim roadmap for smart grid interoperability standards. The proposed set of standards is based on input received from participants in the public Smart Grid Interoperability Standards Interim Roadmap Workshop I, held on April 28-29 in Reston, Virginia. Notes and outcomes of the workshop can be found at http://collaborate.nist.gov/twiki-sggrid/bin/
view/_SmartGridInterimRoadmap/InterimRoadmapWorkshop1.

The more than 400 people who participated in the April 28-29
workshop represented a large cross-section of smart grid stakeholders.

NIST recognizes, however, that not all interested stakeholders participated in the workshop. Arranged in alphabetical order, the list of proposed standards and specifications will be expanded as the process continues and as the standards framework is developed further to support the functionality envisioned for the Smart Grid and as technology evolves.

Although not included in this initial list, communication standards pertaining to basic connectivity and data networking are also important for Smart Grid interoperability. They will be part of the interoperability framework. Initial standards in these categories will be evaluated following the Smart Grid Interim Standards Roadmap
Workshop II, held on May 19-20. Altogether, several hundred standards that are identified or developed over the span of several years may be required to achieve secure, end-to-end interoperability across a fully implemented Smart Grid.

NIST recognizes that the standards and specifications listed below will require further development and that many additional standards and specifications are needed to achieve interoperability of Smart Grid devices and systems. Updated versions of the Smart Grid Interoperability Framework will be published periodically to include
additional standards as they are recognized by NIST and to remove standards from the list, as appropriate, as the coordination process moves forward.

(See http://edocket.access.gpo.gov/2009/pdf/E9-13514.pdf for chart of Standards and Applications.)

Authority: Section 1305 of the Energy Independence and Security Act of 2007 (Pub. L. 110-140).

Request For Comments: NIST seeks comments on the list of standards and specifications identified for inclusion in Release 1.0 of the Smart Grid Interoperability Standards Framework. NIST intends to publish and request comments on several draft versions (Releases) of the Smart Grid
Interoperability Standards Framework and will provide an analysis of all comments received with its publication of the final Release.

E.O. 12866: This notice has been determined not to be significant for the purposes of E.O. 12866.

Dated: June 3, 2009.
Patrick Gallagher,
Deputy Director, NIST.
[FR Doc. E9-13514 Filed 6-8-09; 8:45 am]

BILLING CODE 3510-13-P

Frost & Sullivan Presents LG Electronics IRIS With the 2009 Global Iris Recognition Biometrics Market Customer Value Leadership of the Year Award
Publisher: Webnewswire.com
Jun 08, 2009

Frost & Sullivan selected LG Electronics, Iris Technology Division (LG IRIS) as the recipient of its 2009 Global Iris Recognition Biometrics Market Customer Value Leadership of the Year Award. The 2009 Frost & Sullivan Customer Value Leadership of the Year Award is presented to LG IRIS for its accomplishments in successfully propagating a value-based biometric solution that is cost-effective, superior-performing, and yields measurable returns. The company has been able to maintain consistent growth by virtue of well-planned, growth-oriented strategies and high-quality products. Additionally, the award is in recognition of the company's ability to successfully deploy, implement, and integrate products in conjunction with disparate vendor products in the market, thereby meeting end-user requirements in a more comprehensive way than its competitors.
Recently LG IRIS has introduced a range of hardware and software products. The key features are flexibility, reliability, superior performance, enhanced security, and compatibility. The hardware products include the iCAM4000 series (globally installed at numerous governments and commercial applications), IrisAccess (System Software Suite), IrisAccelerator(TM) (Large Scale High Speed Matching Engine Technology) and others. LG hardware and software supports ANSI/ISO M1 Standards for Interoperability ISO/IEC 19794-6. LG IRIS continues to make extensive resource investments in developing new and innovative technologies; there will be some new products available at the end of the year that will once again change the iris paradigm.

LG IRIS diligently provides technical and market-oriented support through partners and system integrators located across the world. This has enabled the company to penetrate the market and efficiently serve its customer base across the world. The company's outstanding achievements can be highlighted from its recent large-scale deployments across the globe.

"We are excited to receive this prestigious award in recognition of our continual efforts to provide unparalleled technology, and services, to our valued customers," commented Charles Koo, CEO Iris Technology Division, LG Electronics U.S.A. Inc.. "We are proud of the dedication and creative talents of our integration partners, LG IRIS development, marketing, and support teams. This award is a testament to the fundamental impact that LG IRIS has made to the growth of iris recognition technology in the global marketplace, and we will continue to honor it by providing the most innovative technologies to our customers."

LG IRIS has diligently manufactured and delivered products to meet global market security needs. Additionally, it has leveraged its services and strengthened its position by partnering with organizations such as Lenel, Lockheed Martin, Unisys, HID Global, Siemens AG, Sagem Securite, Daon, and ImageWare Systems Inc., among others. Moreover, the company's ability to meet customer satisfaction by providing highly complex solutions that best meets all individual requirements is another of the company's key competitive advantage.

Each year, the Frost & Sullivan Award for Technology Innovation is presented to the company that has demonstrated technological superiority within its industry. This Award recognizes the ability of the company to successfully develop and introduce new technology, formulate a well-designed product family, and make significant product performance contributions to the industry.

Frost & Sullivan's Best Practices Awards recognize companies in a variety of regional and global markets for demonstrating outstanding achievement and superior performance in areas such as leadership, technological innovation, customer service, and strategic product development. Industry analysts compare market participants and measure performance through in-depth interviews, analysis, and extensive secondary research in order to identify best practices in the industry.

SAFRAN Group secures PIV approval
Publisher: Security Document World
Jun 08, 2009

SAFRAN Group’s Sagem Orga and MorphoTrak have received Federal Information Processing Standard Publication 201 (FIPS 201) approval of their technology for the Personal Identity Verification (PIV) programme.

The General Services Administration (GSA)-approved products include smart cards and readers that satisfy security standards of the US Government PIV program. With the GSA certification, the two firms are now an official source of PIV smart cards, PIV logical and physical access readers, as well as template generator and matcher for federal agencies and other organizations required to adhere to the FIPS 201 standard.

Sagem Orga says its PIV cards may be purchased by federal agencies to comply with the Homeland Security Presidential Directive 12 (HSPD-12) to issue a secure, interoperable smart card containing biometric data, cryptographic keys and personally identifiable information about the cardholder.

"The implementation of the PIV card provides a secure method of validating the cardholder’s identity while protecting privacy. It replaces less secure badges and reduces the risk of security breaches while protecting assets and providing government employees with a secure network login and controlled access to federal buildings," says Didier Sérodon, chief technology officer at Sagem Orga.