1. Integrity - Service - Innovation
Special Actions Security Office (SASO) Sharron Norris Walter Smith Melissa Dunlap 2016
Integrity - Service - Innovation

2. Integrity - Service - Innovation
SASO Mission
Provide / maintain access for over 60,000 users worldwide
DCPS access for DoD and non-DoD agencies (ACF2)
DJMS-AC/RC (Army, Air Force, and some Navy and Marine Corps)
MTIFS
WEB DMO
CMS (Army Only)
DDMS
MyPay Master Pin Database
CORP2
Train appointed AISSOs (Administrative Information System Security Officers)
DJMS, DMO, CMS and DDMS systems
9/17/2018
Integrity - Service - Innovation

3. SASO Mission (Continued)
Support for Audit reviews (GAO, SSAE-16, IR, etc.)
Military and Civilian Pay Systems
Internal and External
Support for all FISCAM, iControl, and other system reviews
DCPS Account Suspensions
Effective August 31, 2015 – when situations reveal no documentation for user ID exists (internal or external audits), account is immediately suspended and customer is notified
Customer needs to submit completed documentation
Due to audit requirements and high visibility of systems access
SASO’s goal is to process all requests within 3 to 5 business days
9/17/2018
Integrity - Service - Innovation

4. Audit Readiness and Monthly Reviews
Statement on Standards for Attestation Engagements (SSAE 16)
To ensure that DOD Financial Services are audit ready
Please ensure all forms are completed and legible
If requesting for more access then there is room for on the DD2929
Use the DD2875 block 27
Attached Excel, Word, or PDFs are not considered official forms
DCPS Monthly Audits
If selected for the random monthly audit, please provide updated documentation ASAP
Your account is suspended immediately until we receive valid documentation (per previously mentioned policy)
The documentation MUST be new and current (2875 within one year)
9/17/2018
Integrity - Service - Innovation

5. System Access Request Packages
Forms Package for Access
Initial/Establishment of Access
DD2929, DD2875, and DCPS Security Awareness Certificate
Modification
DD2929, DD2875 (Only need the first page and ensure User ID(s) are listed)
Deletion/Deactivation of Access
DD2875 (only need the first page and ensure all User ID(s) are listed)
Employee does not need to sign
Supervisor must complete blocks 17-20b
MUST submit the DD DAYS PRIOR to separation, retirement, or transfer to another area
9/17/2018
Integrity - Service - Innovation

6. Links for Documentation
DD2929 – most recent version is JAN 2014 -
Select Payroll Office Forms tab
Select DCPS Non-Payroll Office Access Form (DD2929)
DD2875 – most recent version is AUG 2009
Select System Authorization Access Request (SAAR - DD2875)
Training can be reached at the following address:
Select Training tab
Select DCPS Security Awareness Training
9/17/2018
Integrity - Service - Innovation

7. How Do I Submit My System Access Package?
Submitting via Remedy (Preferred Method)
Forms can be digitally or manually (Wet Signatures) signed
Include all documents on the same ticket
When resubmitting a form, resubmit the entire package
Make sure to read all the comments if a ticket is returned
Submitting via Imaging
All forms must be manually (Wet Signatures) signed
Include all documents in the same fax
9/17/2018
Integrity - Service - Innovation

8. Most Common Problems with Documentation
5 Most common problems with the DD2875 and DD2929
Digital signatures vs. manual signatures
If one signature is hand written, then ALL signatures must be hand written (Wet Signatures)
Blocks 8 and 9 on the DD 2875 and Block 4 on the DD 2929 must match
DD Dates in blocks 18 and 19d must be within 60 days of the date that the forms are submitted to the SASO office for processing.
DD2875 – Blocks 21, 21a, and 21b are the blocks that the SASO office will be completing, must be left blank
DD2875 – Blocks 14, 15 and 16 must be completed.
9/17/2018
Integrity - Service - Innovation

9. Most Common Problems with Documentation (Continued)
DCPS Certificate
Must be within one year
Must not be altered in any way
If the certificate prints blank, the that the user received stating it was completed can be submitted
Waivers for Foreign Nationals
The agency or service will need to provide a waiver letter/memo on official letterhead stating that they approve access for this person
The letter/memo must state that they will accept full responsibility for any actions this user takes while working with DCPS sensitive information
The waiver must be signed by an Agency official
9/17/2018
Integrity - Service - Innovation

10. Integrity - Service - Innovation
Digital Signatures
Any document with a digital signature:
Must remain in the original electronic document format so the certificate(s) contained in the signature can be validated.
The process of digitally signing a document actually attaches an electronic certificate to the document.
Printing the document, at any time, takes the document out of the original electronic document format that supports digital signatures. Any previous digital signatures are therefore invalidated.
Scanning a printed copy, even as a .pdf file, will not restore the digital signature support or the ability to validate the digital signatures.
If anyone in the approval chain is incapable of digitally signing the document, then you cannot digitally sign any of the documents.
Once a document is digitally signed - It must be transferred in such a way as to remain in the electronic format it was signed in.
9/17/2018
Integrity - Service - Innovation

11. DD2929 – Completing the access
DD 2929 Form
Block 7 – Home activity
Does not drive any access. If multiple home activities but same Site activity, only one form needed.
Block 8 – Site activity
Up to 5 per userid
Block 16 – Auth No. (Tag or Group)
Block 8
Block 16
Block 8
Block 16
9/17/2018
Integrity - Service - Innovation

12. Integrity - Service - Innovation
MIAP access
All users MUST have a MIAP account
(1-844-DISA HLP),
Press 1 for Applications
Press 4 for the Mechanicsburg menu
Press 6 for MIAP
Select Create New Account
Once you have an account:
Use MECH MODEL2 {V2} or
MECH MODEL5 {V2}
9/17/2018
Integrity - Service - Innovation

13. Integrity - Service - Innovation
Passwords Resets
Password Resets
Entering the incorrect password 3 times
The message at the bottom of the screen will read:
LOGONID xxxxxxx SUSPENDED BECAUSE OF PASSWORD VIOLATIONS
For password violations/resets, call the Customer Care Centers
User should state the problem as “PASSWORD VIOLATIONS”
Cleveland Databases:
Select the option (payroll office) for that user ID
Indianapolis Databases:
Option 3
9/17/2018
Integrity - Service - Innovation

14. Integrity - Service - Innovation
Suspensions
Suspensions of accounts for not logging in during the required 30 days
No new paperwork is needed
Provide the UserID
Submit to
or Submit Remedy under:
Security Violations
Accounts deleted after 45 days of inactivity
NEW paperwork will need to be completed for any accounts that get deleted for nonuse
Do not submit original paperwork signed by SASO
If the USER’s access has been suspended, DD Forms 2875 and 2929 must be resubmitted to obtain the access. Page 10 On Users Desk Guide Dated Jan 2015.
9/17/2018
Integrity - Service - Innovation

15. Remedy Access – obtaining and completing the form
Remedy Access can be reached at the following address:
Please use the form on the website below (extra documents are required for this type of access): -
Select Payroll Office Forms tab
Select Remedy Access Request with Remedy Security Rule of Behavior (SROB)
Remedy access request
Please have the user digitally sign the Rule of Behavior on the last page of the DD2875 (page 7)
9/17/2018
Integrity - Service - Innovation

16. Remedy Access – submitting
Remedy access request
Submit only via Remedy
Title CSR 2875
Must remain in digital format
Remedy questions, modifications and terminations
Requests need to be submitted under the title of:
REMEDY CLIENT UPDATE
9/17/2018
Integrity - Service - Innovation

17. Integrity - Service - Innovation
DCPS and Remedy
Remedy tickets are now auto closed
There will be no returns for corrections.
All corrections will need to be submitted on a new ticket and all forms must be on this new ticket.
Reason: Overall lack of response from customers not acting upon a ticket and auto-closing which resulted in aged tickets.
DCPS and Remedy requests must be submitted on separate tickets.
Remedy requests are submitted under the title of CSR 2875
DD2875 with SROB for Remedy is attached
DCPS requests are submitted under the title of SECURITY ESTABLISHMENT
DD2875, DD2929 and DCPS training certificate (and waiver if needed) are attached
9/17/2018
Integrity - Service - Innovation

18. Integrity - Service - Innovation
Misc
Printer ID
Obtained by calling
Once Printer ID is sent to you
Submit a Remedy ticket under SECURITY ESTABLISHMENT
You MUST provide:
User ID
No forms are needed.
FTP accounts
We do not process these.
Submit DD2875 to:
dfas.indianapolis-in.ztb.list.cin-dcps-ia
9/17/2018
Integrity - Service - Innovation

19. Integrity - Service - Innovation
AMPS Implementation
Account Management and Provisioning System (AMPS)
DLA web-based workflow environment replacing the manual DCPS system access process (2875/2929/2928 forms)
Projected Timeline:
April User Acceptance Testing (UAT)
May 2016 – March 2019 – Phased rollout by Agency (TBD)
AMPS Facts
Users will submit their DCPS role requests in AMPS
Tickets will be tracked through new Remedy title – AMPS DCPS Establishments – CSR will provide user’s SSN and all AMPS SAAR numbers
AMPS keeps user informed of status via notifications or user can check in AMPS under their information
Guidance will be provided
9/17/2018
Integrity - Service - Innovation

20. Integrity - Service - Innovation
QUESTIONS?
9/17/2018
Integrity - Service - Innovation