Special Actions Security Office (SASO)

Transcription

1 Defense Finance and Accounting Service Special Actions Security Office (SASO) Sharron Norris Walter Smith Melissa Dunlap 2016 Integrity - Service - Innovation Integrity - Service - Innovation

2 SASO Mission Provide / maintain access for over 60,000 users worldwide DCPS access for DoD and non-dod agencies (ACF2) DJMS-AC/RC (Army, Air Force, and some Navy and Marine Corps) MTIFS WEB DMO CMS (Army Only) DDMS MyPay Master Pin Database CORP2 Train appointed AISSOs (Administrative Information System Security Officers) DJMS, DMO, CMS and DDMS systems 10/21/2016 Integrity - Service - Innovation 2

3 SASO Mission (Continued) Support for Audit reviews (GAO, SSAE-16, IR, etc.) Military and Civilian Pay Systems Internal and External Support for all FISCAM, icontrol, and other system reviews DCPS Account Suspensions Effective August 31, 2015 when situations reveal no documentation for user ID exists (internal or external audits), account is immediately suspended and customer is notified Customer needs to submit completed documentation Due to audit requirements and high visibility of systems access SASO s goal is to process all requests within 3 to 5 business days 10/21/2016 Integrity - Service - Innovation 3

4 Audit Readiness and Monthly Reviews Statement on Standards for Attestation Engagements (SSAE 16) To ensure that DOD Financial Services are audit ready Please ensure all forms are completed and legible If requesting for more access then there is room for on the DD2929 Use the DD2875 block 27 Attached Excel, Word, or PDFs are not considered official forms DCPS Monthly Audits If selected for the random monthly audit, please provide updated documentation ASAP Your account is suspended immediately until we receive valid documentation (per previously mentioned policy) The documentation MUST be new and current (2875 within one year) 10/21/2016 Integrity - Service - Innovation 4

5 System Access Request Packages Forms Package for Access Initial/Establishment of Access DD2929, DD2875, and DCPS Security Awareness Certificate Modification DD2929, DD2875 (Only need the first page and ensure User ID(s) are listed) Deletion/Deactivation of Access DD2875 (only need the first page and ensure all User ID(s) are listed) Employee does not need to sign Supervisor must complete blocks 17-20b MUST submit the DD DAYS PRIOR to separation, retirement, or transfer to another area 10/21/2016 Integrity - Service - Innovation 5

6 Links for Documentation DD2929 most recent version is JAN Select Payroll Office Forms tab Select DCPS Non-Payroll Office Access Form (DD2929) DD2875 most recent version is AUG Select Payroll Office Forms tab Select System Authorization Access Request (SAAR - DD2875) Training can be reached at the following address: - Select Training tab Select DCPS Security Awareness Training 10/21/2016 Integrity - Service - Innovation 6

7 How Do I Submit My System Access Package? Submitting via Remedy (Preferred Method) Forms can be digitally or manually (Wet Signatures) signed Include all documents on the same ticket When resubmitting a form, resubmit the entire package Make sure to read all the comments if a ticket is returned Submitting via Imaging All forms must be manually (Wet Signatures) signed Include all documents in the same fax When resubmitting a form, resubmit the entire package 10/21/2016 Integrity - Service - Innovation 7

8 Most Common Problems with Documentation 5 Most common problems with the DD2875 and DD2929 Digital signatures vs. manual signatures If one signature is hand written, then ALL signatures must be hand written (Wet Signatures) Blocks 8 and 9 on the DD 2875 and Block 4 on the DD 2929 must match DD Dates in blocks 18 and 19d must be within 60 days of the date that the forms are submitted to the SASO office for processing. DD2875 Blocks 21, 21a, and 21b are the blocks that the SASO office will be completing, must be left blank DD2875 Blocks 14, 15 and 16 must be completed. 10/21/2016 Integrity - Service - Innovation 8

9 Most Common Problems with Documentation (Continued) DCPS Certificate Must be within one year Must not be altered in any way If the certificate prints blank, the that the user received stating it was completed can be submitted Waivers for Foreign Nationals The agency or service will need to provide a waiver letter/memo on official letterhead stating that they approve access for this person The letter/memo must state that they will accept full responsibility for any actions this user takes while working with DCPS sensitive information The waiver must be signed by an Agency official 10/21/2016 Integrity - Service - Innovation 9

10 Digital Signatures Any document with a digital signature: Must remain in the original electronic document format so the certificate(s) contained in the signature can be validated. The process of digitally signing a document actually attaches an electronic certificate to the document. Printing the document, at any time, takes the document out of the original electronic document format that supports digital signatures. Any previous digital signatures are therefore invalidated. Scanning a printed copy, even as a.pdf file, will not restore the digital signature support or the ability to validate the digital signatures. If anyone in the approval chain is incapable of digitally signing the document, then you cannot digitally sign any of the documents. Once a document is digitally signed - It must be transferred in such a way as to remain in the electronic format it was signed in. 10/21/2016 Integrity - Service - Innovation 10

11 DD2929 Completing the access DD 2929 Form Block 7 Home activity Does not drive any access. If multiple home activities but same Site activity, only one form needed. Block 8 Site activity Up to 5 per userid Block 16 Auth No. (Tag or Group) Block 8 Block 16 Block 8 Block 16 10/21/2016 Integrity - Service - Innovation 11

12 MIAP access All users MUST have a MIAP account (1-844-DISA HLP), Press 1 for Applications Press 4 for the Mechanicsburg menu Press 6 for MIAP Select Create New Account Once you have an account: Use MECH MODEL2 {V2} or MECH MODEL5 {V2} 10/21/2016 Integrity - Service - Innovation 12

13 Passwords Resets Password Resets Entering the incorrect password 3 times The message at the bottom of the screen will read: LOGONID xxxxxxx SUSPENDED BECAUSE OF PASSWORD VIOLATIONS For password violations/resets, call the Customer Care Centers User should state the problem as PASSWORD VIOLATIONS Cleveland Databases: Select the option (payroll office) for that user ID Indianapolis Databases: Option 3 10/21/2016 Integrity - Service - Innovation 13

14 Suspensions Suspensions of accounts for not logging in during the required 30 days No new paperwork is needed Provide the UserID Submit to or Submit Remedy under: Security Violations Accounts deleted after 45 days of inactivity NEW paperwork will need to be completed for any accounts that get deleted for nonuse Do not submit original paperwork signed by SASO 10/21/2016 Integrity - Service - Innovation 14

15 Remedy Access obtaining and completing the form Remedy Access can be reached at the following address: Please use the form on the website below (extra documents are required for this type of access): - Select Payroll Office Forms tab Select Remedy Access Request with Remedy Security Rule of Behavior (SROB) Remedy access request Please have the user digitally sign the Rule of Behavior on the last page of the DD2875 (page 7) 10/21/2016 Integrity - Service - Innovation 15

16 Remedy Access submitting Remedy access request Submit only via Remedy Title CSR Must remain in digital format Remedy questions, modifications and terminations Requests need to be submitted under the title of: REMEDY CLIENT UPDATE 10/21/2016 Integrity - Service - Innovation 16

17 DCPS and Remedy Remedy tickets are now auto closed There will be no returns for corrections. All corrections will need to be submitted on a new ticket and all forms must be on this new ticket. Reason: Overall lack of response from customers not acting upon a ticket and auto-closing which resulted in aged tickets. DCPS and Remedy requests must be submitted on separate tickets. Remedy requests are submitted under the title of CSR 2875 DD2875 with SROB for Remedy is attached DCPS requests are submitted under the title of SECURITY ESTABLISHMENT DD2875, DD2929 and DCPS training certificate (and waiver if needed) are attached 10/21/2016 Integrity - Service - Innovation 17

18 Misc Printer ID Obtained by calling Once Printer ID is sent to you FTP accounts Submit a Remedy ticket under SECURITY ESTABLISHMENT You MUST provide: User ID Printer ID No forms are needed. We do not process these. Submit DD2875 to: dfas.indianapolis-in.ztb.list.cin-dcps-ia 10/21/2016 Integrity - Service - Innovation 18

19 AMPS Implementation Account Management and Provisioning System (AMPS) DLA web-based workflow environment replacing the manual DCPS system access process (2875/2929/2928 forms) Projected Timeline: April User Acceptance Testing (UAT) May 2016 March 2019 Phased rollout by Agency (TBD) AMPS Facts Users will submit their DCPS role requests in AMPS Tickets will be tracked through new Remedy title AMPS DCPS Establishments CSR will provide user s SSN and all AMPS SAAR numbers AMPS keeps user informed of status via notifications or user can check in AMPS under their information Guidance will be provided 10/21/2016 Integrity - Service - Innovation 19

20 QUESTIONS? 10/21/2016 Integrity - Service - Innovation 20