ASTM E2842-14(2021) PDF

Overview

ASTM E2842-14(2021): Standard Guide for Credentialing for Access to an Incident or Event Site provides guidelines to promote consistency in credentialing procedures for granting access to emergency scenes, disaster areas, or event sites. Developed by ASTM, this standard aims to enable reliable verification of identity, qualifications, and deployment authorization across various jurisdictions, supporting effective management and resource deployment.

The standard is designed for use by any entity responsible for managing access to incident or event sites, including governmental agencies, private sector companies, and non-governmental organizations (NGOs). By establishing consistent credentialing procedures, the guide enhances interoperability, resource management, and security in emergency management operations.

Key Topics

• Credentialing Framework: Outlines the principles and processes for implementing a credentialing program to verify individual identity, qualification, and authorization to access secured sites.
• Consistency and Interoperability: Emphasizes the need for standardized methods to facilitate cooperation among different agencies and organizations, locally and nationally.
• Credential Elements: Enumerates possible components that may be included in a credential, such as photographs, names, organization information, expiration dates, biometric data, and security features.
• Data Management: Incorporates best practices from the DAMA Guide to the Data Management Body of Knowledge (DAMA-DMBOK) to control and protect sensitive information used in credentialing.
• Privacy and Security: Calls for compliance with applicable laws and regulations, ensuring the privacy of personal data and security of credential information.
• Access Control: Details structured processes for granting access to both credentialed and affiliated non-credentialed personnel under the supervision of authorized individuals.

Applications

Practical uses of ASTM E2842-14(2021) include:

• Disaster Response: Enabling incident command to efficiently identify and admit qualified personnel during emergencies or large-scale incidents.
• Event Security: Supporting the organization and access control for planned events such as sports gatherings or public demonstrations requiring coordination between various agencies.
• Resource Management: Keeping records of responder credentials and deployment authorizations to allocate resources effectively and maintain operational oversight.
• Inter-Agency Collaboration: Streamlining mutual aid operations by promoting credential acceptance across different jurisdictions and organizations, whether state, tribal, local, private sector, or NGOs.
• Credential Issuance: Providing a model for designing and distributing physical or alternative credentials such as badges, wristbands, or ID cards.
• Compliance and Audit: Facilitating the implementation of audit processes to ensure credentialing program effectiveness and adherence to regulations.

Related Standards

Entities implementing this guide should also consult the following related standards and resources for comprehensive credentialing and access management:

• FIPS 201: Personal Identity Verification (PIV) of Federal Employees and Contractors (NIST)
• NIMS Guide 0002: National Credentialing Definition and Criteria (FEMA)
• NFPA 1600: Standard on Disaster/Emergency Management and Business Continuity Programs (NFPA)
• Homeland Security Presidential Directive 12 (HSPD-12): Policy for a Common Identification Standard for Federal Employees and Contractors
• DAMA-DMBOK: Data Management Body of Knowledge (DAMA International)

Conclusion

ASTM E2842-14(2021) serves as a robust guideline for developing and maintaining a reliable credentialing system to control access to incident or event sites. By adhering to this standard, organizations can ensure the identity, qualifications, and authorization of personnel, enhancing security, privacy, and operational effectiveness in emergency management and public safety scenarios.

Keywords: credentialing, incident access, event site security, emergency management, resource authorization, identity verification, NIMS, data protection, access control, interoperability.