1. Welcome to Departmental Security Administrator Training!

2. Information Security Contact Information Phone Number: 617-353-9004 Email: infosec@bu.edu infosec@bu.edu Please note: If there is a problem that requires Information Security’s assistance, the phone call or email should come from the DSAs. We cannot accept phone calls from general users.

3. DSA Folder DSA Manual DSA Manual DSA Cheat Sheet DSA Cheat Sheet Faculty / Staff Link Permit Guide Faculty / Staff Link Permit Guide Information Security Policy Information Security Policy

4. DSA Responsibilities Administer and maintain the UserID’s/Accounts in your department Administer and maintain the UserID’s/Accounts in your department Unsuspend users and administer default passwords using Top Secret Unsuspend users and administer default passwords using Top Secret Request access for UserID’s/Accounts via Permits & Value Security Request access for UserID’s/Accounts via Permits & Value Security

5. Before we log in…

6. UserIDs Most UserIDs are Business Ids: Most UserIDs are Business Ids: Example: CASDIR The first three letters represent the department (ALD, ENG, SEO) The second three letters represent the position (MGR, ST1, WS1)

7. UserIDs Unless your department has been given previous permission, Person Ids are not allowed. Unless your department has been given previous permission, Person Ids are not allowed. Example: CASMLB This would be an invalid UserID for myself as the second half contains my initials.

8. Continuing…

9. Password Rules 8 characters (not case sensitive!) 8 characters (not case sensitive!) Special characters may be used Special characters may be used No repeating characters (such as the “ll” in yellow) No repeating characters (such as the “ll” in yellow) Certain words are restricted because they have been used by too many people (e.g. boston, terriers, redsox, patriots) Certain words are restricted because they have been used by too many people (e.g. boston, terriers, redsox, patriots)

10. Password Rules Passwords can be changed once a day but must be changed every 180 days Passwords can be changed once a day but must be changed every 180 days If a person fails to change their password after 180 days, they will be suspended from the Mainframe If a person fails to change their password after 180 days, they will be suspended from the Mainframe The last three passwords cannot be used when changing a password The last three passwords cannot be used when changing a password

11. Continuing…

12. Security Tokens Freed for the Day: Clients may login without their token for the day Freed for the Day: Clients may login without their token for the day Student Employees: Students are must leave their tokens at the office Student Employees: Students are must leave their tokens at the office Tokens: Two brands, RSA & Quest Tokens: Two brands, RSA & Quest Malfunctioning Tokens & Drift: Contact Information Security to diagnose tokens that appear to be malfunctioning Malfunctioning Tokens & Drift: Contact Information Security to diagnose tokens that appear to be malfunctioning

13. Today’s Agenda Top Secret Top Secret  Unsuspending (and suspending) accounts  Administering a default password for an account  Listing departments and User IDs User Maintenance User Maintenance  Setting up a new user with an account  Opening a position  Updating a users Profile (user ID)  Creating a new UserID

14. Today’s Agenda Access Access  Requesting permits for users  Removing permits from users LET’S LOG IN AND BEGIN!