nfc aso user group meeting wednesday, august 13, 2014 10:00 a.m. – 11:30 a.m., central time...
TRANSCRIPT
NFC ASO User Group MeetingWednesday, August 13, 2014
10:00 a.m. – 11:30 a.m., Central Time
Presented by
Information Technology Services Division (ITSD), Information Technology Security (ITS),Access Management Branch (AMB)
United States Department of AgricultureOffice of the Chief Financial Officer
National Finance Center
NFC ASO User Group MeetingAgenda
Welcome.........................................................Lisa Stafford
Webinar Guidelines.......................................Louis Collins
News & Updates…...........................................AMB Team• November User Group Meeting
• Remedy Updates
• Access Updates
• Reports Updates
• Access Metrics
• Training Update
Questions & Comments..................................................All
August 13, 2014 2
NFC ASO User Group MeetingWebinar Guidelines
• Place your phone on ‘mute’ if you are not speaking
• If you do not have a mute button, please press *6 to silence your phone, and #6 to restore sound
• Do not put your phones on ‘hold’
• Include your agency acronym with your name when signing in
• Send your name & agency, comments & questions via the Notes tab during the webinar
• Email [email protected] for a copy of the presentation or download it from the NFC Security Corner User Group Page (https://www.nfc.usda.gov/Security/user_group.html)
August 13, 2014 3
NFC ASO User Group MeetingNovember User Group Meeting
August 13, 2014 4
Who Should Attend?
•ASOs•Managers
Why Should You Attend?
•Meet the AMB Staff•Face to face meetings•Answers to questions•Hands on demos
Topics (Tentative)
•Main Session – 9:00 a.m.• Review of Security process changes• NFC Security Corner
•Session 1 – 1:00 p.m.• Access Forms Completion • Top Secret Reports
•Session 2 – 2:00 p.m.• Remedy Requester Console • Role Based Access
•Session 3 – 3:00 p.m.• PPS Applications • EmpowHR Security
NFC ASO User Group MeetingRemedy Updates
• Use DPRS Summary Line for both DPRS & DPRW access
• Check the Contact tab in Remedy to be sure that the Company drop down is set to External Customer when you submit a request. This will ensure that requests don’t get “lost”.
• Selecting “Critical” from the “Urgency” drop-down field and/or entering a date does not indicate an expedited request.
– Timeframes associated with requested as assigned• Based on SLA• Request to expedite
– “Urgency” is set upon initial validation or approved Expedite– Expedited requests are processed in the order that they have been
upgraded
• If you re-open a request, please send an e-mail to the Admin who closed the request. If you do not, the Admin may not be aware that the request was re-opened.
August 13, 2014 5
NFC ASO User Group MeetingAccess Updates
August 13, 2014 6
• Name Changes• Is it automatically changed throughout the system?• If not, how do I change it?
• Employees on extended leave• How do I prevent access from being deleted?
• Expedite Policy• Accounts that have been deleted due to inactivity are not
expedited• Users should log in at least every 30 days to prevent
disabling or deletion of accounts• Expedite requests must go to [email protected]
• Signed Rules of Behavior to be required
NFC ASO User Group MeetingAccess Updates
August 13, 2014 7
Trouble Tickets
•Bad examples: • ‘Check users access’• ‘iris is not working’
•What we need:• User’s ID• Application• Is this new access? If so, what is the request number?• Has the access ever worked?• Is the problem limited to one POI or employee?• Screen shot of the error • Screen shot of info typed in before the error • Do not include the screen shots within the email; send as
attachment• Include ASO email and direct phone number on all correspondence• Availability of ASO after ticket is submitted
NFC ASO User Group MeetingAccess Updates
August 13, 2014 8
Reporting Center: Detailed vs. Sensitive
•Sensitive covers data about employee like Race/National Origin code, Union, and Disability but not PII
•Detailed data is payroll personnel data (pay rate, FEHB, FEGLI, TSP) including PII
•IRIS screens, detail data falls under the 100 menu
•Sensitive data falls under the 300 level screens (e.g. Disability/RNO/ERI, Child Support & Alimony etc.)
NFC ASO User Group MeetingAccess Updates
August 13, 2014 9
CURRENT DATA MENU 06/05/14 IR100 SCREEN 000 101 SALARY DATA 116 LIFE INSURANCE 102 DATES & MISC SAL/PERS DATA 117 RETIREMENT DATA 103 SALARY YTD DATA 118 THRIFT SAVINGS DATA 104 FEDERAL TAX 119 EMPLOYEE PERSONNEL DATA 105 STATE TAX 120 THRIFT SAVINGS LOANS 106 CITY TAX 121 THRIFT SAVINGS RETRO PAYMENTS 107 COUNTY TAX 122 SF-50B DATA ELEMENTS 108 BONDS 123 PERSONNEL SUPPLEMENTS 109 ALLOWANCES/COLA/POST DIFF 124 ADDRESS/CHECK INFORMATION 110 FINANCIAL ALLOTMENT 125 PERSONNEL ACTIONS SUMMARY 111 CHARITABLE CONTRIBUTION 126 LAST PAYROLL ACTION 112 DISCRETIONARY ALLOTMENT 127 DETAIL ASSIGN/TEMPORARY PROMOTION 113 FLEXFUND 128 RETAINED GRADE DATA 114 RECEIPT ACCOUNTS 129 INTERMITTENT 115 HEALTH BENEFITS 130 EDUCATION AND CERTIFICATE ENTER SCREEN NUMBER AND PRESS ENTER PF1 = MAIN MENU PF5 = HELP PF8 = PG/DWN ENTER = TRANSFER CLEAR = EXIT
NFC ASO User Group MeetingAccess Updates
August 13, 2014 10
RESTRICTED DATA MENU 06/05/14 IR300 SCREEN 000 * CURRENT DATA MENU * * PERSONNEL HISTORY MENU * 301 DISABILITY/RNO/ERI DATA 302 PERHIS DISABILITY/RNO/ERI DATA 303 WGI INFORMATION 305 PERHIS PERFORMANCE EVALUATION DATA 304 PERFORMANCE EVALUATION DATA 311 PERHIS UNION/ASSOCIATION DUES 306 CHILD SUPPORT & ALIMONY 314 PERHIS SES PERFORMANCE DATA 308 UNION/ASSOCIATION DUES 312 INVESTIGATION DATA 313 SES PERFORMANCE DATA * PAYROLL DATA MENU * >> CURRENTLY UNAVAILABLE << 307 PACS CHILD SUPPORT & ALIMONY * TRANSACTION HISTORY MENU * 310 PACS UNION/ASSOCIATION DUES 309 UNION/ASSOCIATION DUES TRANSACTIONS ENTER SCREEN NUMBER - PRESS ENTER 1400 PF1 = MAIN MENU PF5 = HELP ENTER = TRANSFER CLEAR = EXIT
NFC ASO User Group MeetingAccess Updates
August 13, 2014 11
Audit Requests•3 components
• Access Reports• Inactivity Reports• Audit Reports (SSAE16)
•GESD is System Owner• Contact Rick Culotta ([email protected]) or Nancy
Dressel ([email protected]) for audit verification• Can view NFC System audit information on site (System Security
Plan, SCA Report, Residual Risk Report and any POA&Ms)
•Review reports distributed via GovDelivery
NFC ASO User Group MeetingAccess Updates
August 13, 2014 12
Access Form Changes
AD-3100-A, ASO Designation Form1. Modify the form to change all references to 'Agency' to 'Agency/Tribal
Organization'. 2. Add Block numbers.3. Lengthen the two Email address fields.4. Add Mailing Address (2 lines for Address; City, State, ZIP fields) 5. Add Note at bottom of form associated with Security Officer Type field:
(Tribal Organizations use Division and Department only) 6. Add an ACTION REQUIRED block with options for ADD, MODIFY &
DELLETE 7. Add SPECIAL INSTRUCTIONS block 8. Increase size of PHONE field
NFC ASO User Group MeetingAccess Updates
August 13, 2014 13
Access Form Changes
AD-3100-P, Payroll Personnel Form•SECTION 1. USER INFORMATION
• Add a note stating that multiple users who are getting the SAME access can be submitted on an attachment to the form without creating a separate form for each user.
• Remove the SERVICE ACCOUNT field.• Lengthen the USER NAME field.• Add to the bubble tips for USER NAME and USER EMAIL that if more
space is required, they can write ‘See Special Instructions’ and write the information in the SPECIAL INSTRUCTIONS block.
• SECTION 2. ACCESS REQUIRED: Change the section title to SECTION 2. ACTION REQUIRED.
NFC ASO User Group MeetingAccess Updates
August 13, 2014 14
Access Form Changes
AD-3100-P, Payroll Personnel Form, continued•SECTION 5. ACCESS TO PAYROLL PERSONNEL SYSTEMS
• Remove check boxes next to each application with options underneath• Add a note that the Sensitive-limited option under IRIS includes Screens 302, 305, 311
& 314.• Add an Add (A), Modify (M), and Delete (D) option for EACH option, or include an
action box for each option that will be filled with A, M or D.• Under SPPS (Mainframe), rename the ‘Approval’ option to ‘IND / DC’• The bubble tip for IND / DC should use the term ‘Indebtedness / Death Case’• Remove the ‘Read’ option for TINQ and rename the ‘Update’ option to read ‘(Update
only)’•SECTION 6. ACCESS TO OTHER SYSTEMS
• Remove check boxes next to each application with options underneath• Add an Add (A), Modify (M), and Delete (D) option for EACH option, or include an
action box for each option that will be filled with A, M or D.• Add Applications• Add a note directing the user to add any applications not listed in the SPECIAL
INSTRUCTIONS block.
NFC ASO User Group MeetingAccess Updates
August 13, 2014 15
Access Form Changes
AD-3100-P, Payroll Personnel Form, continued•Add new sections
Section name is: ENVIRONMENTOptions to select: CUAT & FESI TestAdd a note that Production environment is the default
Section name is: SPECIAL INSTRUCTIONS (blank box)Include a note: Cross servicing agencies must provide information required
for the agency serviced, such as FOCUS Library, U printer, etc.
NFC ASO User Group MeetingAccess Updates
August 13, 2014 16
Access Form Changes
AD-3100-P, Payroll Personnel Form
NFC ASO User Group MeetingReports Updates
August 13, 2014 17
• Contractor Report Available
• Inactivity Reports for SALL & Insight coming
• Must log in immediately after access given to prevent being deleted• July & August – Notice only• September & October – Notice & disable• November & beyond – Notice, disable & delete
NFC ASO User Group MeetingAccess Metrics
August 13, 2014 18
The average number of days for all requests falls within the SLAs
NFC ASO User Group MeetingAccess Metrics
August 13, 2014 19
NFC ASO User Group MeetingAccess Metrics
August 13, 2014 20
New Performance Metric for FY 2015 Service Level Agreements
Access Requests(Estimated Turnaround Time in business days)
Access Request Type
Target: The average processing time of all requests will meet or exceed the time frames shown 95% of the time
<=10 User IDs
11-30 User IDs
31-50 User IDs
>50User IDs
Simple
5 days
10 days
15 days
Negotiated
Moderate
10 days
15 days
20 days
Negotiated
Complex
15 days
20 days
25 days
Negotiated
NFC ASO User Group Meeting2014 ASO Training Dates
ASO Basic Training (1st Wednesdays)Sept 3, Oct 1, Nov 5, Dec 3
Remedy Requester Console Training (2nd Wednesdays)
Aug 13, Sept 10, Oct 8, Nov 12, Dec 10
(Remedy Requester Console now includes ASO Reports Training)
ASO Intermediate Training (4th Wednesdays)Aug 27, Oct 22, Nov 26, Dec 24
Register online at https://www.nfc.usda.gov/Security/Security_Training.html
1:00 p.m. – 3:00 p.m., Central Time
*If Wednesday falls on a holiday, class will be moved to following Thursday
Can take ASO training as often as neededAugust 13, 2014 21
NFC ASO User Group MeetingContact Information
Access & Report Requests via Remedy Requester Consolehttps://servicecenter.nfc.usda.gov/arsys/home
Trouble Tickets (Operations & Security Center)[email protected] or (800) 767-9641
AMB Mailbox (Questions, information)[email protected]
Security Cornerhttps://www.nfc.usda.gov/Security/Security_home.html
Ivan JacksonAssociate Director, ITSD, [email protected]
Lisa StaffordChief, ITSD, ITS, [email protected]
Remedy Requester Console TrainingLouis Collins, AMB [email protected] Varnado, AMB [email protected]
ASO Basic TrainingJennee Marquez, AMB [email protected]
ASO Intermediate Training Susan Traill, AMB Staff
August 13, 2014 22
NFC ASO User Group Meeting
Questions? Comments?
August 13, 2014 23