CAC lessons

If the CIO Council and the Office of Management and Budget sign off on a policy that would require all federal agencies to adopt smart card technology for their employees' ID cards, agencies can follow certain steps recommended by those who have already gone through the process.

Here's a checklist:

Conduct an internal public relations campaign. Explain why the agency is adopting smart card technology and its benefits.

Educate your employees. Set their minds at ease that any data collected about them will be securely maintained by their employing agency and will not be shared with others.

Standardize. To ensure interoperability, adopt industry standards and best practices.

Write clear business rules. A single body to oversee interoperability would ensure everyone's cards, readers, protocols and policies can work with one another.

Customize to your security needs. Protect what you consider to be most vital in your organization.

Expect technology to improve. Take into account future technologies and added security features, such as biometrics.