Defense Information System for Security

(DISS) Joint Verification System (JVS)

Industry Provisioning Instructions

Version 1.0

Date Created: 11/13/18

DISS JVS Industry Provisioning Instructions

Overview. These instructions are meant to assist industry Facility Security Officers

(FSOs)/Security Managers in getting provisioned in the Defense Information System for Security

(DISS) Joint Verification System (JVS) and to facilitate making their Personnel Security System

Access Request (PSSAR) submission process as smooth as possible. The Defense Security

Service (DSS) will provision one hierarchy manager for your facility, and that hierarchy manager

will then subsequently provision additional users as necessary. Please read through the guide

in its entirety, and refer to the last section to ensure you don’t submit your provisioning packet

with any of the most common reasons for rejection.

Location of DISS Provisioning Materials. You can get to the DISS Home page by going to the

following web address - https://psa-pki.dmdc.osd.mil/psawebdocs/docPage.jsp?p=DISS. Once

there you can find DISS Account Management Policy, Account Request Procedures, and the

DISS JVS PSSAR FORM (DD FORM 2962, DEC 2016); this is the only PSSAR form that will be

accepted for Industry DISS JVS provisioning.

Items to Include in Your PSSAR Packet. Your PSSAR packet needs to include the completed DISS

JVS PSSAR FORM (DD FORM 2962, DEC 2016), both Cyber Awareness and Personally Identifiable

Information (PII) Training certificates, and your Letter of Appointment (LOA).

Where to Submit Your PSSAR Packet. You must send the entire PSSAR packet to the following

email address: dss.DISSProvisioning@mail.mil

Training Requirements. You must submit training certificates showing completion of both Cyber Security Awareness and PII training within the past year and submit those training certificates with your PSSAR packet in order to be provisioned. The following information is provided for on the mandatory training classes/certificates: There are two options for obtaining Cyber Security Awareness/Information Assurance completion certificates: 1. https://iatraining.disa.mil/eta/disa_cac2018/launchPage.htm

DISS JVS Industry Provisioning Instructions

2. Annual security training provided by the cleared service/company/agency There are two options for obtaining PII completion certificates: 1. http://iatraining.disa.mil/eta/piiv2/launchPage.htm 2. http://www.cdse.edu/catalog/elearning/DS-IF101.html (you need a STEPP account)

Requirements for the LOA. The LOA is a document prepared by the company/organization/agency that lists who the DISS JVS account is for and the specific duties that require them to have Hierarchy Manager and Security Officer/Manager Level access to the system. Specifically, make sure the LOA: 1) Is filled out on company/organization/agency letter head.

2) Names the PSSAR applicant as the JVS Primary Hierarchy Manager and Security Officer.

3) Lists the specific duties the applicant will perform while using JVS.

4) Signed by someone designated as a Key Management Personnel (KMP) in the National Industrial Security System (NISS) and cleared in connection with your facility clearance. This must be the same KMP that completes and signs part 5 of the DISS JVS PSSAR (DD FORM 2962, DEC 2016) as the nominating official. DISS JVS PSSAR FORM (DD FORM 2962, DEC 2016) Part 1. 1) First complete the Date and the Type of Request (circled in red below).

2) Fill out blocks 1-12 with the applicant’s information. If you don’t have an office symbol/department you can leave block 3 blank.

3) Complete section 1 by filling out block 13 (circled in red below).

DISS JVS Industry Provisioning Instructions

DISS JVS PSSAR FORM (DD FORM 2962, DEC 2016) Part 2. 1) For initial JVS provisioning leave Section 2, blocks 14 and 15 blank.

2) To obtain the ability to perform JVS account and user management functions as well as subject management functions equal to what JPAS account managers can currently do in JPAS, JVS applicants must complete the areas/blocks circled in red below and in Block 16. At a minimum each JVS applicant must:

a) Enter the applicant name in the name block at the top of the second page. b) In block 16 a. enter both the Security Management Office (SMO) Name and the

organizations/agency cage code. c) In block 16 b. check boxes for both the Security Officer and Hierarchy Manager roles. d) Also in block 16 b. check the box for Manage Reports permission.

DISS JVS Industry Provisioning Instructions

3) While this group of industry applicants are being provisioned with both Security Officer and Hierarchy Manager roles, some applicants will need additional permissions to perform all of their respective SMO duties once JVS is 100% operational. Optional permission options that are not available for industry are lined out in red (below); please do not check any of those options. Also, if you don’t handle polygraphs or SCI SMOs disregard the remaining steps outlined in the rest of this optional permission section.

Only industry applicants that currently manage polygraphs or manage SCI SMOs (level 2 or 3) in

their existing Joint Personnel Adjudication System (JPAS) accounts will check those additional

permissions under the Security Officer and Hierarchy Manager roles in block 16 b. Only those

applicants need to refer to the figure below to determine which of the highlighted optional

permissions under the Security Officer and Hierarchy Manager roles you need to check.

4) For initial JVS provisioning leave Section 2, block 17 blank (only used for DISS CATS accounts).

DISS JVS Industry Provisioning Instructions

DISS JVS PSSAR FORM (DD FORM 2962, DEC 2016) Part 3. This part is the training verification portion. Remember that the applicant has to have taken both Cyber Awareness and PII Training

within one year of the date they are provisioned. That means that if either or both of these required training certificates are more than one year old at the moment DSS begins to provision your account it will trigger an automatic disapproval.

1) Make sure the applicants name is in the name block at the top of page 3 (circled in red).

2) In block 18, check the Cyber Awareness Training block and then enter the date from the Cyber Awareness training certificate (the date it was completed) in the date block on the right hand side (circled below).

3) In block 19, check the PII Training block and then enter the date from the PII training certificate (the date it was completed) in the date block on the right hand side (circled below).

DISS JVS PSSAR FORM (DD FORM 2962, DEC 2016) Part 4. This part is applicant’s certification

portion. DSS will accept either digital or wet (ink) signatures; digital signatures are preferred and

will require less time for processing.

1) Block 20 (circled below) requires the applicant’s signature.

2) Block 21 (circled below) date the applicant signed the PSSAR (required for wet signatures.)

DISS JVS Industry Provisioning Instructions

DISS JVS PSSAR FORM (DD FORM 2962, DEC 2016) Part 5. This part is the nominating official’s certification portion. The nominating official completing part 5 must be an industry KMP cleared in connection with your facility clearance. Complete part 5 using the following information: 1) Block 22 (circled below) can be used to list additional SMOs to add to the applicants account if and only if those SMOs are also associated with this nominating official (KMP). If this block is not big enough to list all of those SMOs you can attach a list of the SMOs in your packet and simply put “See Attached List” in this block. For additional SMOs not associated with this nominating official, a separate PSSAR will be required.

2) Block 23 (circled below) is a description of the applicant’s duties explaining why they require a DISS JVS account with Hierarchy Manager and Security Officer roles. An example of what this description of duties could look like is, “This account is required in order for (applicant’s name) to manage the company’s personnel security program performing duties as both Hierarchy Manager and Security Officer.” Block 23 cannot be left empty or it will trigger an automatic disapproval; DSS will not assume duties based on job title, company name, etc.

3) Block 24 (circled below) requires the Nominating Official’s complete printed name.

4) Block 25 (circled below) requires the Nominating Official’s organizational title.

5) Block 26 (circled below) requires a good contact number to reach the Nominating Official (no switchboards).

6) Block 27 (circled below) requires the Nominating Official’s signature.

7) Block 28 (circled below) date the Nominating Official signed the PSSAR (required for wet signatures.) 8) Please note that the Nominating Official identified in Blocks 24-28 must be the same official signing your LOA.

DISS JVS Industry Provisioning Instructions

DISS JVS PSSAR FORM (DD FORM 2962, DEC 2016) Part 6. This part is the validating official’s

verification portion. Leave Part 6 blank. DSS will perform the duties of validating official for every

applicant in this provisioning group and will complete part 6.

Most Common Reasons for Provisioning Packet Rejection.

1) Part 2, Section 16b: Selecting everything in this section or alternatively selecting nothing at all.

2) Part 3, Sections 18 and 19: Certificates/training expired (more than one year old) or dates on certificates do not match dates on PSSAR form

3) Part 5, Section 23: Information missing (blank) or duties do not correspond to the roles requested in Part 2 Section 16b.

4) LOA missing or incomplete (not signed by KMP, requests a JPAS account vice JVS account, etc.)

5) KMP acting as the nominating official (on both the LOA and/or PSSAR) is not cleared in connection with the facility clearance