NFC ASO User Group Meeting Wednesday, February 12, 2014 10:00 a.m. – 11:30 a.m., Central Time

1. United States Department of Agriculture Office of the Chief Financial Officer National Finance Center NFC ASO User Group Meeting Wednesday, February 12, 2014 10:00 a.m. – 11:30 a.m., Central Time Presented by Information Technology Services Division (ITSD), Information Technology Security (ITS), Access Management Branch (AMB)

2. NFC ASO User Group MeetingAgenda Welcome.........................................................Lisa Stafford Webinar Guidelines.......................................Louis Collins News & Updates…...........................................AMB Team • Performance Metrics……………………………..Slide 4 • Access Updates…………………………………..Slide 9 • Role Based Access Update…………………...…Slide 15 • Access Forms Update……………………...……Slide 17 • Annual ASO Verification……………………….Slide 21 • Training Update.………………………………..Slide 22 Questions & Comments..................................................All February 12, 2014

3. NFC ASO User Group MeetingWebinar Guidelines • Place your phone on ‘mute’ • Do not put your phones on ‘hold’ • Include your agency acronym with your name when signing in • Send your name & agency, comments & questions via the Notes tab during the webinar • Email NFC.ASO@nfc.usda.gov for a copy of the presentation or download it from the NFC Security Corner User Group Page (https://www.nfc.usda.gov/Security/user_group.html) February 12, 2014

4. NFC ASO User Group Meeting Performance Metrics Impacted by Furlough Open requests became expedites Had to process old requests before processing new ones Increased daily monitoring Expedites are still a concern February 12, 2014

5. NFC ASO User Group Meeting Performance Metrics Processed Access Requests - PPS February 12, 2014

6. NFC ASO User Group Meeting Performance Metrics Access Requests and Incidents July 2013 – December 2013 February 12, 2014

7. NFC ASO User Group Meeting Performance Metrics UserIDs Processed July 2013 – December 2013 February 12, 2014

8. NFC ASO User Group Meeting Performance Metrics High Priority vs. Expedited Requests July 2013 – December 2013 February 12, 2014

9. NFC ASO User Group Meeting Access Updates Question:  “I have flagged requests in Remedy Requestor Console at the ‘Critical’ level.  I rechecked a few of these requests and they were changed to low priority. Why?” Response: The initial level you put on a request is overwritten when the request is verified for completeness and accuracy. Requests are not marked critical unless an email is sent to nfc.aso@usda.gov to request it be expedited. If the ticket is not yet past its target completion date, NFC must give approval to expedite; otherwise, no approval needed. Please use official user name, rather than nicknames on requests to ensure that accounts can be matched up across platforms. Request Contractor Expiration Date report to monitor contractors’ access February 12, 2014

10. NFC ASO User Group Meeting Access Updates Verify information in Remedy (email, phone number, etc.) Check Work Info tab for status Don’t use or share accounts owned by former employees If you NEVER use mainframe access, request to be placed in ‘non-mainframe’ area to prevent deletion due to inactivity February 12, 2014

11. NFC ASO User Group Meeting Access Updates • EOS Conversion • EOS Output Management tool to be replaced by Control D • Obsolete by end of March • Will request access to Control-D (CTMS SESSID) • You are affected if you use EOSEVT1 SESSID • Will notify ASOs of affected users • Test 2/22/2014 • If successful test, leave up • If unsucessful, implement on 3/8/2014 • Send testers’ contact info to Mike Wilson at Michael.Wilson@nfc.usda.gov or call (504) 426-2473 • Notifications: GovDelivery, Mainframe Broadcast, ASO User Group February 12, 2014

12. NFC ASO User Group Meeting Access Updates USDA EVPN Solution SecuRemote to Juniper Testing coming soon No change on your part Instructions to log on will be provided After initial logon, access applications as usual If current SecuRemote users would like to test, send email to lisa.stafford@nfc.usda.govandjames.varnado@nfc.usda.govwith‘EVPN Test’ in the subject line If you encounter problems contact: NFC EVPN Sub-CSAs Quentin Lewis (Quentin.lewis@nfc.usda.gov) and Ron King (Ron.king@nfc.usda.gov) EVPN Tier 3 support evpn-support@one.usda.gov Notifications: GovDelivery, Mainframe Broadcast, ASO User Group February 12, 2014

13. NFC ASO User Group Meeting NFC Access Audits Notification via GovDelivery Actions required Reporting Center Insight Other reports already on Reporting Center Access reports distributed quarterly in Reporting Center Can request reports at any time Report Incidents (security breach, incorrect access, stolen passwords, sharing accounts, inappropriate/ unusual activity, etc.) to OSC at osc.etix@usda.gov. Include screen shots where available. February 12, 2014

14. NFC ASO User Group MeetingASO Best Practices – Access Review From:Kimberly.SherlockDrayer@fiscal.treasury.gov [mailto:Kimberly.SherlockDrayer@fiscal.treasury.gov] On Behalf Of HRreports@bpd.treas.govSent: Friday, February 07, 2014 9:23 AMTo:nfc@service.govdelivery.comCc: Stafford, Lisa - OCFOSubject: NFC Reporting Center Audit - Action Required (OGE) Per the request on 02/03/2014 from the National Finance Center, the NFC Reporting Center Audit for OGE has been reviewed. The report received provided users whose Reporting Center access had been changed.  The request was to review the report and submit any additional changes via Remedy Requester Console. Changes were submitted via Remedy Requester Console on 02/06/2013. Don’t reply to GovDelivery Email February 12, 2014

15. NFC ASO User Group Meeting Role Based Security Scope: 130+ agencies Strategy: Mandated reorganizations Smaller agencies Larger agencies Status: BFS in process APHIS about to start NIST FEMA SIF February 12, 2014

16. NFC ASO User Group Meeting Role Based Access Steps February 12, 2014

17. NFC ASO User Group Meeting Access Forms Update Use forms to prevent errors Requests with errors will go into a Pending status and will take longer to complete. When requesting access, add ONLY the changes – not existing access Handling multiple form attachments in Remedy Don’t send multiple requests for same access (duplicates). Can complicate provisioning access February 12, 2014

18. NFC ASO User Group Meeting Access Forms Update AD-3100-R, Reporting Center Request for Security Access Form Since Levels of Access apply to all reports requested on a form, please add footnotes to indicate what is required for that report, e.g., 1=Organization, 2=POI, 3=Employing Office, 4=Contact Point, 5=ALC, 6=Zone, Division, Dept   Add Zone, Division & Dept fields in Section 3 or Section 4. Add field for Employing Office in Section 5.  next to T&A Reports Add field for Agency Location Code in Section 5. next to OTRS report Add field for Originating Office in Section 5., next to Outstanding Travel Advance Report Add BEAR56 report under ADMINISTRATIVE REPORTS in Section 5. Report Access February 12, 2014

19. NFC ASO User Group Meeting Access Forms Update AD-3100-R, Reporting Center Request for Security Access Form, continued Add CFC Campaign Spreadsheet, CFC Department Summary, & CFC Agency Summary to FINANCIAL REPORTS in Section 5. Report Access Add PCIP Reports to Section 5 Add an Additional Comments section Include a note somewhere on the form that multiple users with the SAME access can be submitted on an attachment Add options box next to each report that will hold A, M or D (add, modify or delete) Remove ‘& ACCESS LEVEL’ in Section 5. (two places) Add a note to refer to Reporting Center procedures on website Add a 2nd page that lists all the reports included in the report categories (Personnel Action Reports, Workforce Reports, etc.) February 12, 2014

20. NFC ASO User Group Meeting Access Forms Update AD-3100-P, Payroll Personnel Request for Security Access Form Add PROP Add RETM Add DOTSE Add INDEBTEDNESS / DEATH CASE to SPPS Approval option Add Remarks section Add option to “Replace all pre-existing access to all systems (must check ‘yes’ or ‘no’)” February 12, 2014

21. NFC ASO User Group Meeting Annual ASO Verification • Notice coming out soon • Verify Status • Separated • Transferred to Another Agency • No longer an ASO • On Extended Leave • ASO Not Listed • Verify Personal Information • Name Change • ASO Type • Email Address • UserID February 12, 2014

22. NFC ASO User Group Meeting Training Update Remedy Requester Console & Security Reports Training have been consolidated Online registration for training available at https://www.nfc.usda.gov/Security/Security_Training.html Select the month that you want to schedule your course by using the drop down bar Select the date you wish to attend the course. (Course dates are shown in bold type.) February 12, 2014

23. NFC ASO User Group Meeting Training Update, continued Select the time. (Currently all courses begin at 1:00 p.m. Central Time). Fill in your first name, last name, email address and phone number. Select Continue. The registrant and NFC will receive a confirmation email. The email also contains links to cancel, reschedule or create a new appointment. Training dates and times can be found at https://www.nfc.usda.gov/Security/Security_Training.html Can schedule ASO User Group Meetings online also Evaluation forms available on website February 12, 2014

24. NFC ASO User Group Meeting2014 ASO Training Dates ASO Basic Training (1st Wednesdays) March 5, April 2, May 7 Remedy Requester Console Training (2nd Wednesdays) February 12, March 12, April 9 , May 14(Remedy Requester Console now includes ASO Reports Training) ASO Intermediate Training (4th Wednesdays) February 26, March 26, April 23, May 28 Register online at https://www.nfc.usda.gov/Security/Security_Training.html 1:00 p.m. – 3:00 p.m., Central Time *If Wednesday falls on a holiday, class will be moved to following Thursday February 12, 2014

25. NFC ASO User Group Meeting Training Changes February 12, 2014

26. NFC ASO User Group MeetingContact Information February 12, 2014

27. NFC ASO User Group Meeting Questions? Comments? February 12, 2014