As the full-time Program Manager for the DL/ID Verification Systems (DIVS) Program, Clerus Solutions has provided comprehensive management from the inception of the Program.
DIVS Program Management
Clerus Solutions was involved at the conception of DIVS and lent its expertise to the drafting of the DIVS Charter and By-laws and laid the foundation for the program by authoring the DIVS Program Plan and Concept of Operations. Clerus Solutions provides all of the staff work that supports the DIVS Board of Directors, the DIVS Executive Committee and all subcommittees and working groups formed under the program. To date, Clerus has effectively and efficiently managed the collaboration of the 27 US driver licensing jurisdictions that have participated in DIVS.
Clerus Solutions creates and maintains detailed cost estimates used to obligate funds for the program and drafted and maintains the DIVS Acquisition Plan, which defines the acquisition of resources needed for the success of the program. Once the federal grant monies have been spent, several systems will exist based on user fees. Clerus Solutions created cost models for several systems that plan to establish user fees over the coming years.
Clerus Solutions drafts minutes, newsletters, and other communications used by DIVS to communicate status and solicit stakeholder involvement in the program. Clerus Solutions also maintains the DIVS Communications Plan, which is used by the Executive Committee to define outreach initiatives.
Privacy & Security Planning and Implementation
Clerus Solutions drafted and maintains the DIVS Privacy & Security Plan, which consists of a set of program level deliverables and a set of deliverables for each verification system project within the scope of DIVS. The program level deliverables provide guidance that is applicable to all verification systems and are used to produce the project specific deliverables.
The DIVS program level deliverables are:
- Privacy and Security Policy Statement
- Privacy and Security Framework for Vendors
- Security Policy for Vendors
- Privacy and Security Categorizations
- Privacy and Security Maintenance Plan
- Compliance Assessment for Vendors
Each DIVS verification system project will foster development and/or implementation of a specific verification system. Using the above program documents as guidance, each DIVS project produces and/or validates the following privacy and security related deliverables:
- Initial Privacy Assessment
- Privacy Impact Assessment
- Privacy and Security Policies
- Privacy and Security Plan
- Privacy and Security Plan Outputs
- User Agreement
The privacy and security goals and requirements of the DIVS systems are based on and generally consistent with a blend of relevant federal and state guidelines and requirements. These include but are not limited to: REAL-ID legislation; NIST Special Publications 800-122, SP800-64 revision 2, and SP800-53 revision 3; the Drivers Privacy Protection Act (DPPA); DHS’ Handbook for Safeguarding Sensitive Personally Identifiable Information; the Fair Information Practice Principles (FIPP) used within DHS; and various state regulations.
Verification Systems Project Plans
There are five verification systems projects within the scope of DIVS:
- Electronic Verification of Birth Records (EVVE/EVVER)
- Electronic Verification of Immigration Status (SAVE/VLS)
- Electronic Verification of US-issued Passports
- Electronic Verification of Social Security Information (SSOLV)
- Determining if a person holds more than one driver license/ID card (S2S)
Each of these projects has its own unique circumstances that need to be managed. For some projects, such as S2S and US Passport verification, there was no existing system that provided the needed capability when DIVS began, so DIVS needed to assist with development. For existing systems, such as EVVE/EVVER, SAVE and SSOLV, DIVS fosters improvements to enhance their capabilities. Therefore, for some projects, our support started at the beginning of the system development lifecycle while, for other projects involving existing systems, our support started further into the lifecycle.
It is critical to get an unbiased evaluation of each system’s performance. Does it meet user needs and expectations? Has it detected/deterred driver license and ID card fraud as expected? What is the resource commitment needed to effectively use the system? Will the system be acceptable to the states? Clerus has developed evaluation criteria, worked with states to collect data, and drafted evaluation documentation based on the results of state operation of several verification systems.
One of the most valuable deliverables from a pilot program is a best practices document that details the lessons learned from the pilot and provides guidance to all users based on the experiences of the pilot participants. Clerus has developed several best practice/lessons learned documents that will be used by the states that participate in the various verification systems supported by DIVS.
What is DIVS?
The DL/ID Verification Systems, Inc. (DIVS) is a not-for-profit corporation formed by the State of Mississippi to organize, implement, and coordinate the electronic systems states need to verify identification information provided by driver license and identification card applicants.