1. The Pennsylvania State University
Master Access Coordinators’ Council 28 February, pm OPP Bldg. 105 A/B

2. Welcome & Introduction
MAC List review & sign-in
Please review the list for any changes, incorrect information, etc.

3. Meeting Logistics Purpose Expectations Frequency / Time / Location
Today: Broad Overview, focus on CCURE
Expectations
Frequency / Time / Location

4. Communications Office Location 155 Suite – OPP Bldg. Phone Number:
(shared):

5. Relevance for FCs:
Applies to all facilities & campus locations (except Hershey & Penn Tech)
Applies to all exterior doors
One central electronic access system (C-CURE) – centrally administered, locally managed
All new construction or renovation
All surveillance systems
Exceptions or questions go to Physical Security
Where are we now?
POLICY AD65
Baseline technical specifications & requirements for electronic access, surveillance & building perimeter control
(update in progress)

6. Establishes Access Coordinators
Relevance for FCs:
Establishes Access Coordinators
Must use common access procedures (SY2001)
Electronic scheduling preferred method of access management; keys are secondary
Establishes key accountability and audit requirements
Where are we now?
POLICY AD68
University Access Policy
Establishes access procedures (SY2001)
IN PRACTICE:
FCs must recommend all Access Coordinators!

7. Access Coordinator Requirements: Key Database
Key Ordering & Storage Requirements
Use of Request Forms (FAARs)
All Keys
All Permanent clearances (>120 days)
Mandatory Self-Audits
Quarterly, Annual, Change of AC
Record Retention Requirements
Applies to all Access Control Devices (ACDs; i.e. ‘punch code doors’)
(HFS has own corollary procedures)
Where are we now?
PROCEDURE SY2001

8. Policy Exceptions….
We realize that access needs are unique across work units… The entire goal is auditability… …Policy exceptions must be approved, in writing, by the Physical Security Office

9. Roles & Responsibilities
Budget Executive:
Overall accountability for space…
Ensure audits are completed
Provide resources (human or capital) as needed to ensure that policies are met

10. Roles & Responsibilities
Facility Coordinator (or DBS):
Overall responsibility for space…
Communication between Budget Executive & Mac
Locking Schedules
Changes in space (allocation or construction)
Needs & audit findings
Assign (or serve as) MAC for work unit

11. Roles & Responsibilities
Master Access Coordinator (MAC):
Overall responsibility for access…
Assign Local Access Coordinators (LACs) & Coordinate their efforts
Ensure that audits are performed and reported
Coordinate access management (keys, CCURE)
Future: submit all key requests for work unit

12. Roles & Responsibilities
Local Access Coordinator (LAC):
Perform access management duties…
Assign (& remove!) keys / clearances
CCURE: Time Specs, Manual Events, clearances
Keys: inventory requirements, database
Ensure proper use of FAAR forms
Perform & report required audits (Quarterly, Annual, Special, change in AC)

13. Roles & Responsibilities
Access Monitor:
Monitoring Privileges Only…
No administration
No required audits
No keys
No paperwork
May have responsibility for manual actions

14. Roles & Responsibilities
Surveillance Monitor (where approved):
Access to Surveillance (camera) systems…
No administration
No required audits
No keys
No paperwork
Real-time, read-only access

15. Roles & Responsibilities
Physical Security:
We don’t manage access...
We manage the people (and systems) who manage access!
System support, training, assistance & upgrades
Spot audits to assist in developing compliance
Compliance reporting
Resolve issues involving multiple work units

16. Roles & Responsibilities
Best Practices:
Communication!
With Budget Exec & FC
With LACs
Consider a ‘AC / Security Committee’
Deliberate effort – dedicate some time
Requires training

17. Policy Interpretation: Digital Signatures
The Office of Physical Security WILL ACCEPT digital signatures provided all such signatures:
Be auditable, specifically containing the date/time of signature and a verification of the signee’s identity; AND,
Any electronic version(s) of official forms must contain the acknowledgement language contained on the hard copy of the current, approved version of the respective form; AND,
A hard-copy replica of the form can be produced on demand, as may be required.

18. Admin Topics - Audits Quarterly: Annual (& Special, Change in AC):
Are access-holders still affiliated with work unit
Annual (& Special, Change in AC):
Full inventory of keys and review of clearances
Tools in development to help you
Targeting first campus-wide annual audit report for Summer 2019

19. Admin Topics - Forms

20. Admin Topics – ACA Approval
For MACs:
Must be signed by Budget Executive
(approval to spend money – order keys, WOs)
Must be signed by FC - communication
For LACs & Security Monitors:
May be signed by MAC if work unit allows
All forms approved by University Access Controller

21. Admin Topics – FAAR Approval
Keys:
Always require a FAAR Form *
Temporary ID cards & ‘punch code’ doors managed as keys
CCURE:
Required for Permanent Clearances (>120 days…or one semester)
Temporary Clearances must use activation & expiration dates
All forms signed by Requestor & approved by Access Coordinator (LAC)

22. Admin Topic - Resources
Webpage:
BOX Account
listserv
What works…what is preferred?

23. Admin Topics - Training (Discussion)
Policy Familiarity (on LRN)
After vetting, will be required to become an AC
LAC Training:
Keys… LRN?
CCURE 800 – Job Aides
Group Training (scheduled or group request)
MAC Training: 1 on 1

24. CCURE Overview & Job Aides
Components
Server
Panel
Door Module
Card Reader
Request to Exit
Sounder
Electric Latch or latch retraction device
Door & Door Hardware (always locked)

25. Large Initiatives Update
Keybox / AD 65 – perimeter security CCURE 9000 upgrade University Key Management System

26. Round Table Discussion
What are the biggest issues / needs for your work unit? (to drive future meeting agendas)

27. In Closing…
Review of Action Items & Decisions Comments for the Good of the Order Training: CCURE Monitoring Client

28. Physical Security Office Staff
Primary Office Contact
Larry Murray- Security Network Administrator
Scotty Eble, EE- Chief Physical Officer
Keith Runkle- Security IT Specialist
Eric Bauman- Security Systems Administrator
Josh Troxell- University Access Manager
Marty Mantz- Security Specialist CWC
Kristen Croyle- University Access Specialist
Denny Hackenberg- Security IT Specialist/Interim System Administrator
Christina Brown- University Access Specialist