Questions and Answers

2700-0064: Questions and Answers

Email from Barbara Carlson (LISTS Sponsor) at GSFC

Pam Starling asked me to provide the additional information requested below:

1. For example, does the security office use any other information besides that collected here to issue security badges?   The LISTS application contains modules used by Security to track clearances for both civil servants and contractors.  A module within the application is used to print the employee badge.

2. Where does this information go so that it can be used to locate individuals in the building,
An interface file, containing public data on employees (for example:  name, email address, building, room, phone number) is provided to support the on-line GSFC phone and the x.500 mail service directories.  Multiple applications use the interface file to validate employees as part of their application user log on process.

3. what services are improved (specifically) by collecting this information?
The scheduling of physical examinations for civil servants by the GSFC Medical Unit is contained within the LISTS application.  The automated tracking of exams provides notification to employees.  Mailing lists for internal and external employee printed communications are generated through the application.

4. Please also explain how this information is used by NASA to implement HSPD-12.
An extract of LISTS data was used to populate the employee information for the initial load to the agency database (IdMAX).  A daily interface between LISTS and IdMAX is used to keep both data sources in sync. 

Please let me know if any additional information is needed. 

Barbara Carlson

From: Petraska, Karen E. (HQ-JA000)
Sent: Thursday, February 22, 2007 1:21 PM
To: Kit, Walter (HQ-JD000)
Cc: Moore, Annette (HQ-JE000)
Subject: RE: questions on 2700-0064

I do not think that Walter Hussey has the answer to this question.  I need to forward this to the GSFC HSPD-12 Implementation Manager who is (perhaps disconnectedly from the person who wrote these answers) responsible for the longer term uses and disposition of GSFC LISTS.  I will cc Walter Hussey on my message to GSFC.

I believe the answer is that the LISTS system will not be used for HSPD-12 purposes, but will be kept because it is intertwined with many other GSFC functions, such as key issuance, medical exams, etc.  Our HSPD-12 system maintains identities and identity vetting information but does not enable the tracking of other things (and will not ever).

I will get you an answer ASAP.

Karen

met with Terry Conroy and Corinne Irwin from GSFC this morning.  Although I know that you have other people on your list to get the information about LISTS from, Terry and Corinne are directing GSFC’s strategy as it relates to LISTS and other legacy systems and are in the best position to speak about future plans.  (The folks “on the ground” aren’t always aware of the future business strategies).

My understanding is this:

Today, LISTS is NOT authoritative for identity data.  GSFC uses the Agency HSPD-12 systems as the authoritative source of identity data.

GSFC will be migrating to full use of the Agency HSPD-12 system for all badging requirements.

By 5/2008, the LISTS system will no longer contain SSN and Date-of-Birth information.

LISTS serves as GSFC’s Center “Locator” system.  (There is no Agency “Locator” system).  It has many subsystems, that cross reference center occupants to facilities information (building and room), contact information (work telephone), and other things that map to a full employee listing (like door keys, for example).   The Agency’s HSPD-12 system is not authoritative for that kind of information.

Over time, the GSFC people will be delving into those subsystems and tying them back to the Agency HSPD-12 system for identity mapping.  That is a long process and will take time.  Right now, the development priorities relate to the specific, direct HSPD-12 milestones we are being measured on.  The development activities relating to sunsetting of legacy systems will take a little longer.

I have copied Terry and Corinne on this message in case I have misrepresented their comments.