Directives Equivalency Approval Memorandum for DOE O 206.2

Department of Energy Bonneville Power Administration P.O. Box 3621 Portland, Oregon 97208-3621 EXECUTIVE OFFICE DEC 11 2015 In reply refer to: A-7 MEMORANDUM FOR ELLIOT E. MAINZER, ADMINISTRATOR and CHIEF EXECUTIVE OFFICER, BONNEVILLE POWER ADMINISTRATION THROUGH: CLAUDIA R. ANDREWS Z ferl/l- A (MANAM CHIEF OPERATING OFFICER, BONNEVILLE POWER ADMINISTRATION THOMAS A. meponain WUD CHIEF COMPLIANCE OFFICER, COMPLIANCE AND GOVERNANCE (ACTING), BONNEVILLE POWER ADMINISTRATION D ie D ff / : FROM: LARRY D. BUTTRESS Sigh Pillcec CHIEF INFORMATION OFFICER, BONNEVILLE POWER ADMINISTRATION SUBJECT: DIRECTIVES EQUIVALENCY APPROVAL MEMORANDUM PURPOSE: To document BPA’s equivalency to Contractor Requirements Documents (CRD), Appendix A and Attachment 1 of Department of Energy Order 206.2, Identity, Credential, and Access Management (ICAM). BACKGROUND: The purpose of this order is to establish requirements and responsibilities for DOE’s identity, credential, and access management program that: a. Provides a trusted framework and common identity infrastructure for access to DOE facilities and systems; b. Reduces the identity, credential, and access management burden for individual DOE and contractor organizations by fostering common interoperable approaches; c. Aligns identity, credential, and access management activities that cross organizational boundaries; d. Enables trust in online transactions through common identity, credential, and access management policies and approaches; and e. Establishes roles to enhance interoperability when collaborating with external identity management activities. JUSTIFICATION: BPA’s relationship with contractors is markedly different than the relationship DOE has with its Management and Operating contractors as defined in the Federal Acquisition Requirements Subpart 17.6-Management and Operating Contracts. BPA is granted independent contracting authority pursuant to the Bonneville Project Act of 1937 (U.S.C. 832a(F)) and is exempt from the Federal Acquisition Regulations (FAR) pursuant to the Federal Property and Administrative Services Act of 1939. As such BPA does not utilize Contract Requirements Documents (CRD) referenced in this Order. All BPA contractor requirements and expectations are incorporated into the Bonneville Purchasing Instruction (BPI) requiring contractors to comply with all BPA policies. Additionally, BPA works closely with the DOE OCIO in building BPA’s Identity, Credential, and Access Management program, which complies with all elements and requirements of this order; to include HSPD-12 and PIV (Personal Identity Verification) credentials. RECOMMENDATION: Recommend that you approve this equivalency memorandum. Elliot E. Mainzer, Administrator and Chief Executive Officer, Bonneville Power Administration APPROWE oo MM ao DISAPPROVE: pate: hil CONCURRENCES/ CONSULTATIONS: Michael Johnson, CIO. cc: Skila Harris Senior Advisor, Power Marketing Administration, Department of Energy