During a credentialing investigation, which policy provides the criteria that the Investigative Service Provider (ISP) must collect information about?

During a credentialing investigation, which policy provides the criteria that the Investigative Service Provider (ISP) must collect information about?

• A. The FIPS 201 policy
• B. The National Security Directive on Credentialing
• C. The Homeland Security Presidential Directive (HSPD-12) policy
• D. The Presidential Policy Directive 12 on Identity Management

Answer: (C)

The question is testing your understanding of which policy sets what information must be gathered during a credentialing background investigation. The Homeland Security Presidential Directive on Identity, Credentialing, and Access establishes the uniform framework federal agencies must follow to verify identity and assess trustworthiness for government credentials. Within that framework, it defines the criteria the Investigative Service Provider must use to determine what information to collect, such as identity verification, employment and education history, residences, criminal history, and other factors relevant to suitability for a PIV credential. In other words, this directive tells investigators what data elements and considerations are required when evaluating someone for a federal credential. The other options describe standards or related policy developments rather than the governing collection criteria. FIPS 201 is the technical standard that specifies the data elements and card technology for the PIV card itself, not the overarching collection policy. Presidential Policy Directive 12 addresses identity management principles and governance but builds on the framework established by the original directive. The National Security Directive on Credentialing is not the policy that defines the required information in this context. So, the directive that provides the criteria the ISP must use to collect information during credentialing is the Homeland Security Presidential Directive on Identity, Credentialing, and Access.

The question is testing your understanding of which policy sets what information must be gathered during a credentialing background investigation. The Homeland Security Presidential Directive on Identity, Credentialing, and Access establishes the uniform framework federal agencies must follow to verify identity and assess trustworthiness for government credentials. Within that framework, it defines the criteria the Investigative Service Provider must use to determine what information to collect, such as identity verification, employment and education history, residences, criminal history, and other factors relevant to suitability for a PIV credential. In other words, this directive tells investigators what data elements and considerations are required when evaluating someone for a federal credential.

The other options describe standards or related policy developments rather than the governing collection criteria. FIPS 201 is the technical standard that specifies the data elements and card technology for the PIV card itself, not the overarching collection policy. Presidential Policy Directive 12 addresses identity management principles and governance but builds on the framework established by the original directive. The National Security Directive on Credentialing is not the policy that defines the required information in this context.

So, the directive that provides the criteria the ISP must use to collect information during credentialing is the Homeland Security Presidential Directive on Identity, Credentialing, and Access.