2. 1 LOGICAL ACCESS Remedy Management System Training - Health Sciences Center - Click the Speaker Icon for Audio

3. 2Agenda Logical Access: Definitions and ControlsLogical Access: Definitions and Controls WorkflowWorkflow Documentation ProcessDocumentation Process Remedy Screen ShotsRemedy Screen Shots Helpful LinksHelpful Links

4. 3DEFINITONS Logical Access Process by which individuals are permitted to use computer systems and the networks to which these systems are attached. Furthermore, applications and networks, and the services they provide, are available only to those individuals who are entitled to use them.

5. 4CONTROLS LA1 A formalized documented system for user access is established LA2 Full user Account information is documented and retained LA3 Authorized approval and documentation LA4 User access is verified by Process Owners LA5 Segregation of duties analysis LA6 Segregation of duties analysis for administrative users LA7 User password requirements are established and enabled LA8 Application password requirements are established and enabled LA9 Automatic lock-out controls are established and enabled LA10 Documentation and control for Terminations LA11 Monitoring Access Reviews LA12 Auto-Logging established, tracked and reviewed

6. 5 1.BPO approves the completed access forms 2.User completes required training 3.Product Manager reviews forms for completeness and approval, and documents into a Remedy ticket 4.Access is granted and confirmed HIGH LEVEL WORKFLOW Four Step Process

7. 6 ACCESS FORM - Basics User Information Type of Request Access Type with Specific Details Statement of Approval –Accuracy of request –Knowledge of University policies and procedures –Required Training has been addressed –Segregation of duties has been considered Authorized Approver Signature LA CONTROLS 1-6 AND 10 DOCUMENTATION See “Helpful Links” for your specific application

8. 7DOCUMENTATION For New or Change of Access: Attach Request Form (required) Verify and/or attach Confidentiality Agreement Verify User Current Access Notify Hiring Manager/Process Owner For Termination of Access: Attach Request Form or Termination Report (required) Lock/Disable User Account Notify Hiring Manager Product Managers record the following information into Remedy

9. 8DOCUMENTATION 1.Change/Delete Access 1.Change/Delete Access Similar process as a new user request Requires an Access Form Segregation of Duties Analysis for Change Request All Changes recorded in Remedy 2.Termination Requests: submitted prior to users last day 3.Notification to Human Resources prior to users last day Key Points to Remember: LA CONTROLS 10

10. 9REMEDY

11. 10REMEDY

12. 11REMEDY

13. 12REMEDY

14. 13REMEDY

15. 14REMEDY

16. 15REMEDY

17. 16REMEDY

18. 17REMEDY

19. 18REMEDY

20. 19REMEDY

21. 20REMEDY

22. 21REMEDY

23. 22REMEDY

24. 23REMEDY NOTE: The actions in this tab look different on the web version than the desktop client.

25. 24REMEDY

26. 25REMEDY

27. 26 HELPFUL LINKS Banner Products Logical Access Information: http://www.slu.edu/services/HR/university_security_forms.html IDX Products Logical Access Information: http://pmoweb.slu.edu/ EHR Products Logical Access Information: http://ehr.slucare.edu/ eRS Products Logical Access Information: http://ers.slu.edu/ Logical Access Change Management Initiative: http://www.slu.edu/x20377.xml Refer to Product Manager for all other products