Integrity - Service - Innovation Special Actions Security Office (SASO) Sharron Norris Walter Smith Melissa Dunlap 2016 Integrity - Service - Innovation

Integrity - Service - Innovation SASO Mission Provide / maintain access for over 60,000 users worldwide DCPS access for DoD and non-DoD agencies (ACF2) DJMS-AC/RC (Army, Air Force, and some Navy and Marine Corps) MTIFS WEB DMO CMS (Army Only) DDMS MyPay Master Pin Database CORP2 Train appointed AISSOs (Administrative Information System Security Officers) DJMS, DMO, CMS and DDMS systems 9/17/2018 Integrity - Service - Innovation

SASO Mission (Continued) Support for Audit reviews (GAO, SSAE-16, IR, etc.) Military and Civilian Pay Systems Internal and External Support for all FISCAM, iControl, and other system reviews DCPS Account Suspensions Effective August 31, 2015 – when situations reveal no documentation for user ID exists (internal or external audits), account is immediately suspended and customer is notified Customer needs to submit completed documentation Due to audit requirements and high visibility of systems access SASO’s goal is to process all requests within 3 to 5 business days 9/17/2018 Integrity - Service - Innovation

Audit Readiness and Monthly Reviews Statement on Standards for Attestation Engagements (SSAE 16) To ensure that DOD Financial Services are audit ready Please ensure all forms are completed and legible If requesting for more access then there is room for on the DD2929 Use the DD2875 block 27 Attached Excel, Word, or PDFs are not considered official forms DCPS Monthly Audits If selected for the random monthly audit, please provide updated documentation ASAP Your account is suspended immediately until we receive valid documentation (per previously mentioned policy) The documentation MUST be new and current (2875 within one year) 9/17/2018 Integrity - Service - Innovation

System Access Request Packages Forms Package for Access Initial/Establishment of Access DD2929, DD2875, and DCPS Security Awareness Certificate Modification DD2929, DD2875 (Only need the first page and ensure User ID(s) are listed) Deletion/Deactivation of Access DD2875 (only need the first page and ensure all User ID(s) are listed) Employee does not need to sign Supervisor must complete blocks 17-20b MUST submit the DD2875 2 DAYS PRIOR to separation, retirement, or transfer to another area 9/17/2018 Integrity - Service - Innovation

Links for Documentation DD2929 – most recent version is JAN 2014 https://dfas4dod.dfas.mil/systems/dcps/consolid/ - Select Payroll Office Forms tab Select DCPS Non-Payroll Office Access Form (DD2929) DD2875 – most recent version is AUG 2009 Select System Authorization Access Request (SAAR - DD2875) Training can be reached at the following address: Select Training tab Select DCPS Security Awareness Training 9/17/2018 Integrity - Service - Innovation

How Do I Submit My System Access Package? Submitting via Remedy (Preferred Method) Forms can be digitally or manually (Wet Signatures) signed Include all documents on the same ticket When resubmitting a form, resubmit the entire package Make sure to read all the comments if a ticket is returned Submitting via Imaging All forms must be manually (Wet Signatures) signed Include all documents in the same fax 9/17/2018 Integrity - Service - Innovation

Most Common Problems with Documentation 5 Most common problems with the DD2875 and DD2929 Digital signatures vs. manual signatures If one signature is hand written, then ALL signatures must be hand written (Wet Signatures) Blocks 8 and 9 on the DD 2875 and Block 4 on the DD 2929 must match DD2929 - Dates in blocks 18 and 19d must be within 60 days of the date that the forms are submitted to the SASO office for processing. DD2875 – Blocks 21, 21a, and 21b are the blocks that the SASO office will be completing, must be left blank DD2875 – Blocks 14, 15 and 16 must be completed. 9/17/2018 Integrity - Service - Innovation

Most Common Problems with Documentation (Continued) DCPS Certificate Must be within one year Must not be altered in any way If the certificate prints blank, the email that the user received stating it was completed can be submitted Waivers for Foreign Nationals The agency or service will need to provide a waiver letter/memo on official letterhead stating that they approve access for this person The letter/memo must state that they will accept full responsibility for any actions this user takes while working with DCPS sensitive information The waiver must be signed by an Agency official 9/17/2018 Integrity - Service - Innovation

Integrity - Service - Innovation Digital Signatures Any document with a digital signature: Must remain in the original electronic document format so the certificate(s) contained in the signature can be validated. The process of digitally signing a document actually attaches an electronic certificate to the document. Printing the document, at any time, takes the document out of the original electronic document format that supports digital signatures. Any previous digital signatures are therefore invalidated. Scanning a printed copy, even as a .pdf file, will not restore the digital signature support or the ability to validate the digital signatures. If anyone in the approval chain is incapable of digitally signing the document, then you cannot digitally sign any of the documents. Once a document is digitally signed - It must be transferred in such a way as to remain in the electronic format it was signed in. 9/17/2018 Integrity - Service - Innovation

DD2929 – Completing the access DD 2929 Form Block 7 – Home activity Does not drive any access. If multiple home activities but same Site activity, only one form needed. Block 8 – Site activity Up to 5 per userid Block 16 – Auth No. (Tag or Group) Block 8 Block 16 Block 8 Block 16 9/17/2018 Integrity - Service - Innovation

Integrity - Service - Innovation MIAP access All users MUST have a MIAP account 1-844-347-2457 (1-844-DISA HLP), Press 1 for Applications Press 4 for the Mechanicsburg menu Press 6 for MIAP https://miap.csd.disa.mil/portal.html Select Create New Account Once you have an account: Use MECH MODEL2 {V2} or MECH MODEL5 {V2} 9/17/2018 Integrity - Service - Innovation

Integrity - Service - Innovation Passwords Resets Password Resets Entering the incorrect password 3 times The message at the bottom of the screen will read: LOGONID xxxxxxx SUSPENDED BECAUSE OF PASSWORD VIOLATIONS For password violations/resets, call the Customer Care Centers User should state the problem as “PASSWORD VIOLATIONS” Cleveland Databases: 800-729-3277 Select the option (payroll office) for that user ID Indianapolis Databases: 888-332-7366 Option 3 9/17/2018 Integrity - Service - Innovation

Integrity - Service - Innovation Suspensions Suspensions of accounts for not logging in during the required 30 days No new paperwork is needed Provide the UserID Submit email to dfas.indianapolis-in.jjf.mbx.saso-civ-pay-systems-security@mail.mil or Submit Remedy under: Security Violations Accounts deleted after 45 days of inactivity NEW paperwork will need to be completed for any accounts that get deleted for nonuse Do not submit original paperwork signed by SASO If the USER’s access has been suspended, DD Forms 2875 and 2929 must be resubmitted to obtain the access. Page 10 On Users Desk Guide Dated Jan 2015. 9/17/2018 Integrity - Service - Innovation

Remedy Access – obtaining and completing the form Remedy Access can be reached at the following address: Please use the form on the website below (extra documents are required for this type of access): https://dfas4dod.dfas.mil/systems/dcps/consolid/ - Select Payroll Office Forms tab Select Remedy Access Request with Remedy Security Rule of Behavior (SROB) Remedy access request Please have the user digitally sign the Rule of Behavior on the last page of the DD2875 (page 7) 9/17/2018 Integrity - Service - Innovation

Remedy Access – submitting Remedy access request Submit only via Remedy Title CSR 2875 866-498-8687 Must remain in digital format Remedy questions, modifications and terminations Requests need to be submitted under the title of: REMEDY CLIENT UPDATE 9/17/2018 Integrity - Service - Innovation

Integrity - Service - Innovation DCPS and Remedy Remedy tickets are now auto closed There will be no returns for corrections. All corrections will need to be submitted on a new ticket and all forms must be on this new ticket. Reason: Overall lack of response from customers not acting upon a ticket and auto-closing which resulted in aged tickets. DCPS and Remedy requests must be submitted on separate tickets. Remedy requests are submitted under the title of CSR 2875 DD2875 with SROB for Remedy is attached DCPS requests are submitted under the title of SECURITY ESTABLISHMENT DD2875, DD2929 and DCPS training certificate (and waiver if needed) are attached 9/17/2018 Integrity - Service - Innovation

Integrity - Service - Innovation Misc Printer ID Obtained by calling 866-498-8687 Once Printer ID is sent to you Submit a Remedy ticket under SECURITY ESTABLISHMENT You MUST provide: User ID No forms are needed. FTP accounts We do not process these. Submit DD2875 to: dfas.indianapolis-in.ztb.list.cin-dcps-ia 9/17/2018 Integrity - Service - Innovation

Integrity - Service - Innovation AMPS Implementation Account Management and Provisioning System (AMPS) DLA web-based workflow environment replacing the manual DCPS system access process (2875/2929/2928 forms) Projected Timeline: April 2016 - User Acceptance Testing (UAT) May 2016 – March 2019 – Phased rollout by Agency (TBD) AMPS Facts Users will submit their DCPS role requests in AMPS Tickets will be tracked through new Remedy title – AMPS DCPS Establishments – CSR will provide user’s SSN and all AMPS SAAR numbers AMPS keeps user informed of status via email notifications or user can check in AMPS under their information Guidance will be provided 9/17/2018 Integrity - Service - Innovation

Integrity - Service - Innovation QUESTIONS? 9/17/2018 Integrity - Service - Innovation