1. NFC ASO User Group Meeting Wednesday, May 14, 2014 10:00 a.m. – 11:30 a.m., Central Time Presented by Information Technology Services Division (ITSD), Information Technology Security (ITS), Access Management Branch (AMB) United States Department of Agriculture Office of the Chief Financial Officer National Finance Center

2. NFC ASO User Group Meeting Agenda Welcome.........................................................Lisa Stafford Webinar Guidelines.......................................Louis Collins News & Updates…...........................................AMB Team Remedy Requester Console Groupings Review of Service Level Agreements Access Metrics ASO Survey Results Access Updates Report Metrics Training Update Questions & Comments..................................................All May 14, 20142

3. NFC ASO User Group Meeting Webinar Guidelines Place your phone on ‘mute’ Do not put your phones on ‘hold’ Include your agency acronym with your name when signing in Send your name & agency, comments & questions via the Notes tab during the webinar Email NFC.ASO@nfc.usda.gov for a copy of the presentation or download it from the NFC Security Corner User Group Page (https://www.nfc.usda.gov/Security/user_group.html)NFC.ASO@nfc.usda.govhttps://www.nfc.usda.gov/Security/user_group.html May 14, 20143

4. NFC ASO User Group Meeting Remedy Requester Console Groupings May 14, 20144 RRC Grouping PurposeUsed ByComments ASODesignated and authorized Agency Security Officers/Officials (ASO) submit Security Access Requests Agency Security Officers2 options available – Internal and External SPOService Personnel Officials/Officers (SPO) Submit Application Problems for PPS, EmpowHR, Web TA or HR LOB applications to NCC which include ABCO and DPRS Claims issues. Servicing Personnel Office 4 options – PPS, HR LOB, Web TA and EmpowHR. Scheduled for implementation is Paycheck8 in Quarter 4 2014 BPOBenefits Processing Officials (BPO) submit benefits incidents or problems in relation to FEHB, TSP and I/O Benefits Processing Officials 3 options available – FEHB, TSP and International Organization (I/O) FAFinancial Administrator/Analyst (FA) submit financial incidents or problems in relation to FMMI, MIDAS, CFMS, MITS, CPAIS and FDW. Financial administrators1 option available – FA (Financial Administrators/Analyst) includes product lines FMMI, MIDAS, CFMS, MITS, CPAIS and FDW. Everything EXCEPT SECURITY Find the guidance on how to request access for the NCC on the “Who to Contact” page at: https://www.nfc.usda.gov/Contact_Us/Help_Desks/CHD/requestor_console.html Everything (including the spreadsheet to request access) is on the above link off of the NFC Home Page NFC Contact Center, Who to Contact Page Mike Schleifstein (Michael.Schleifstein@nfc.usda.gov) is the POCMichael.Schleifstein@nfc.usda.gov for the Contact Center for Requester Console access/questions.

5. NFC ASO User Group Meeting Service Level Agreements May 14, 20145 Access Requests (Estimated Turnaround Time in business days) Access Request Type 95% Completed in Time Frame Shown <=10 User IDs 11-30 User IDs 31-50 User IDs >50 User IDs Simple 5 days 10 days 15 days Negotiated Moderate 10 days 15 days 20 days Negotiated Complex 15 days 20 days 25 days Negotiated

6. NFC ASO User Group Meeting Access Metrics May 14, 20146 The average number of days for all requests falls within the SLAs

7. NFC ASO User Group Meeting Access Metrics May 14, 20147 39% increase in number of requests processed in April 2014 vs. March 2014

8. NFC ASO User Group Meeting Access Metrics May 14, 20148 43% increase in number of UserIDs processed in April 2014 vs. March 2014

9. NFC ASO User Group Meeting Access Metrics May 14, 20149

10. NFC ASO User Group Meeting ASO Survey Results May 14, 2014 10 559 Recipients 102 Respondents Are you interested in attending an ASO User Group Meeting in New Orleans, Louisiana? Yes (51.96%) What date? November 12 (27.08%) Reason for not wanting to attend? Agency doesn’t have funding (76.92%) Topics Level of access; scope of access, Ensure encrypted PII, suspend and separated users; access reports to ensure authorized users; expedited security access request; reset/remove password for user via SALL. Submitting requests, definition of various security terms "Meet and Greet" of Security staff; Challenges within the ‘as is’ process; Planned improvements and customer expectations within the process. ASO Responsibilities Forms/Response for Remedy Console procedure Proper use of the Interface users have to connect to NFC mainframe to run reports on ACIDS and various other helpful reports on our user base Transitioning to role based security access, best practices for conducting semi-annual reviews of existing accesses, change in NFC policy regarding former agencies not terminating access of separated employees, webinars available to client employees for DPRS, etc. Simple memo from NFC that tells when to submit a remedy ticket and when to reach out to the NFC’s Operations Security Center at 1-800-767-9641 or osc.etix@usda.govosc.etix@usda.gov User profile creations and ASO Reports and making their format more useful Using separation reports, how to determine who has access to NFC and disable their ids

11. NFC ASO User Group Meeting Access Updates May 14, 201411 TMGT Table 063 problems corrected New cancellation policy in effect – Cancel if incorrect or incomplete New Insight access report available Modified Insight access form available NCCESCALATION mailbox is not for security requests ASUSPENDs Users must log in after ASUSPEND removal, or the user may be deleted Make sure user logs in Don’t send requirements for IDs with ASUSPEND. Just need to remove ASUSPEND Accounts are usually deleted between 1 st & 5 th day of month (inactivity)

12. NFC ASO User Group Meeting Access Updates May 14, 201412 Profiles Changes to a profile affect ALL users in that profile If you want only one user in a profile to change, they must move to a separate profile (new or existing) If a profile has only ONE user, you can request changes to the profile or to the user Resolution of Requests Completed requests placed in Resolved status User has 3 days to verify (Remedy will close in 7 days) After the request has been closed, no changes can be made and user must submit a trouble ticket Access Forms Forms still being updated. Please use Section 6. Other for missing apps until the forms are ready

13. NFC ASO User Group Meeting Access Updates May 14, 201413 Do not place Passwords or SSNs in emails You should not put the Password and UserID in the same email SSNs on access requests must be encrypted within Remedy When reporting a Security Incident (security breach, incorrect access, sharing passwords, inappropriate/unusual activity, etc.) Submit a ticket to OSC Include screen shots where possible (remove sensitive data) If your agency services another agency, and that relationship ends, the servicing agency should remove access after a reasonable time frame (e.g., past time needed for audits)

14. NFC ASO User Group Meeting Report Metrics May 14, 201414

15. NFC ASO User Group Meeting Report Metrics May 14, 201415

16. NFC ASO User Group Meeting Training Update May 14, 201416

17. NFC ASO User Group Meeting 2014 ASO Training Dates ASO Basic Training (1 st Wednesdays) Jun 4, Jul 2, Aug 6, Sept 3, Oct 1, Nov 5, Dec 3 Remedy Requester Console Training (2 nd Wednesdays) May 14, Jun 11, Jul 9, Aug 13, Sept 10, Oct 8, Nov 12, Dec 10 (Remedy Requester Console now includes ASO Reports Training) ASO Intermediate Training (4 th Wednesdays) May 28, Jun 25, Jul 23, Aug 27, Oct 22, Nov 26, Dec 24 Register online at https://www.nfc.usda.gov/Security/Security_Training.htmlhttps://www.nfc.usda.gov/Security/Security_Training.html 1:00 p.m. – 3:00 p.m., Central Time *If Wednesday falls on a holiday, class will be moved to following Thursday May 14, 201417

18. NFC ASO User Group Meeting Contact Information Access & Report Requests via Remedy Requester Console https://servicecenter.nfc.usda.gov/arsys/home Trouble Tickets (Operations & Security Center) OSC.Etix@nfc.usda.govOSC.Etix@nfc.usda.gov or (800) 767-9641 Contact AMB (Request Training, Notifications) NFC.ASO@nfc.usda.gov Security Corner https://www.nfc.usda.gov/Security/Security_hom e.html Ivan Jackson Associate Director, ITSD, ITS Ivan.Jackson@nfc.usda.gov Lisa Stafford Chief, ITSD, ITS, AMB Lisa.Stafford@nfc.usda.gov Remedy Requester Console Training Louis Collins, AMB Staff Louis.Collins@nfc.usda.gov James Varnado, AMB Staff James.Varnado@nfc.usda.gov ASO Basic Training Jennee Marquez, AMB Staff Genevieve.Marquez@nfc.usda.gov ASO Intermediate Training Susan Traill, AMB Staff Susan.Traill@nfc.usda.gov May 14, 201418

19. NFC ASO User Group Meeting Questions? Comments? May 14, 201419