Fms Form 11 08 Esaas – Fill Out and Use This PDF

Section I – User Information

User – Check One Box:

New Request – Add user to specific applica- tion(s)

Revoke Access (all) – Remove access to all applications.

Revoke – Revoke access to specific application(s)

Modify/Update – Change of name or access connections

Additional ALCs only – Add valid child ALC to the parent ALC

User Name: User’s full name: last, first, middle

Current User ID: If you are a current user in GOALS II, provide your current ID. If not, leave blank.

Agency Name: Name of government organization to the most specific level. If a contractor, enter com- pany name (EXAMPLE: Treasury Department).

Bureau Name: (EXAMPLE: Financial Management Service).

Address: Street address, Room number, City, State, Zip Code, and Country (No Post Office Boxes).

User’s Complete Work Phone No: Work number to

include area code (EXAMPLE: 222-222-2222)

Fax No.: Work fax number to include area code

(EXAMPLE: 333-333-3333).

Supervisor Name: Supervisor’s full name

(first, middle, last).Under this heading please include supervisor’s internal email address (which is different from user’s local LAN email address), phone number, signature, and date).

Section II – Access Information

Operation System Used: Check user’s current operating system.

Connection:

Dial – User must use a modem and a SecurID card or PKI Certificate to access FMS’s system.

Direct – User has a T1 connection directly into FMS’s system.

Internet – User that accesses FMS applications through the internet.

Do you currently have a SecurID card? Yes or No. (User only needs one (1) SecurID card – except for ECS.) If yes, indicate serial number from back of card.

Section III – Application(s) Requested

Place an X next to either “Online” or “Bulk” for each application requested. If requesting access to FACTS I, FACTS II, GFRS, IFCS please indicate the role requested in Section IV. Otherwise Section IV will be completed by FMS. For FACTS I, place an X next to both on-line and bulk.

Section IV – GOALS II Processing Information

If requesting access to FACTS I, FACTS II, GFRS, IFCS please indicate the role requested in Section IV. Otherwise Section IV will be completed by FMS. For other applications, this section will be completed by FMS.

Section V – FMS Authorization:

To be signed by FMS -GOALS II Management Team.

Section VI – Rules of Behavior

Rules of Behavior must be read and accepted by applicant by signing the acceptance form on Page 5.

Section V - Introduction

The following Rules of Behavior are to be followed by all users of the FMS Reporting Applications for GOALS II: FACTS I, FACTS II, FMS 1219/1220, GFRS, IFCS, or SOD. These rules clearly delineate responsibilities of and expectations for all individuals with access to the applications. Non-compliance of these rules will be enforced through sanctions commensurate with the level of infraction. Actions may range from a verbal or written warning, removal of system access for a specific period of time, reassignment to other duties, or termination, depending on the severity of the violation.

1.Responsibilities

All authorized users who have access to GOALS II shall read, acknowl- edge understanding, and sign the Rules of Behavior before accessing the applications and associated data.

By agreeing to and signing these rules, the user signifies:

•Understanding of the FMS Reporting Applications security requirements

•Acceptance of the FMS Reporting Applications security requirements

•Acknowledgement that disciplinary action may be taken based on violation of the Rules of Behavior

Federal Program Agency (FPA) Management shall verify that the users who require access to one or more of these FMS reporting applications have read and accepted (via signature on the acceptance form) these Rules of Behavior.

2.Other Policies and Procedures

These Rules of Behavior are an addendum to, and should be used in conjunction with, the Financial Management Service Information Technology Rules of Behavior, dated June 2002 or FPA equivalent for FPA users. They are intended to enhance and further define the spe- cific rules each user must follow while accessing GOALS II applica- tion(s). The rules are consistent with the policy and procedures described in the following directives:

FMS IT Security Policy manual, Version 2.1, dated November 20, 2003 and the FMS IT Security Standards, Version 1, dated November 20, 2003.

Treasury Department Publication (TD P) 71-10, Treasury Department Security Manual, 1992

OMB Circular A-130, Management of Federal Information Resources, Appendix III – Security of Federal Automated Information Resources (Revised).

Federal Information Security Management Act (FISMA), Title III of the E-Gov Act. (Note: supercedes the Computer Security Act of 1987.)

3. Application Rules

User must ensure that the FMS Information Technology resources with which he/she has been entrusted are used properly; as directed by FMS policies and standards, taking care that the laws, regulations, and policies governing the use of such resources are followed and that the value of all information assets is preserved.

Users must follow approved FMS procedures to request or to revoke access to the FMS reporting applications of GOALS II. User must complete and submit the appropriate access management forms: the ESAAS and a signed copy of the Rules of Behavior.

User is responsible for all actions that are taken under his/her Logon ID and password.

User will access GOALS II in a responsible way and only to accomplish legitimate business. User must not read, alter, insert, copy, or delete

FMS 11FORM-08 ESAAS EDITION OF (6-07) IS OBSOLETE

any FMS data except in accordance with assigned job responsibilities. Ability to access data does not equate to authority to manipulate data. In particular, user must not browse or search FMS data except in the performance of authorized duties.

User will not disclose his/her password to other people or knowingly or carelessly make it possible for other people to access GOALS II using his/her Logon ID and Password.

User will not write password down.

User will change password every 45 days or when prompted.

User will choose hard to guess passwords using a minimum of eight case-sensitive alpha/numeric and/or special characters, of which at least two are numeric.

User must not attempt to circumvent any GOALS II security control mechanisms.

User must use the virus protection mechanism(s) provided by FMS or their employing agency.

User is aware that his/her assigned Logon ID and password serve as his/her electronic signature for all activity while active in the GOALS II

User is aware of his/her responsibility for complying with the GOALS II policies and safeguards.

Users must complete and document IT security awareness training as required by applicable government directives.

User must report any known or suspected breaches of GOALS II security to the FMS Help Desk (202-874-4357) and to the GWA Customer Assistance Group (202-874-8270).

4.0 Application Access.

Users will access the FMS reporting applications in one of three ways:

1)Dial-in access, 2) FMS Net –T1 line or 3) Internet connection. 4.1Dial-in access and FMS Net –TI line.

Dial-in access is authorized for FACTS II, or FMS 1219/1220.

Users must complete and submit the appropriate FMS access management forms to request dial-in access to FACTS II, or FMS 1219/1220. Users must sign and return to FMS the Non-Disclosure Agreement. Return of a signed FMS Non-Disclosure agreement is required for all users who access FMS systems.

Dial-in and FMS Net – T1 users also agree not to use any other network connections, (e.g., cable modems, DSL modems, a home network, etc.) while connected to the FMS Enterprise platform. Access to FACTS II, and FMS 1219/1220 may not be accomplished via the Internet.

The terms of this agreement supplement and do not supersede the terms of any other agreements or policies governing dial-in, FMS Net – T1 line access or use of FMS computer systems.

4.2 Connection to the Internet.

FMS and other FPA personnel access to FACTS I, GFRS, IFCS, and SOD are via the Internet.

Users must complete and submit the appropriate FMS access management forms to request access to FACTS I, GFRS, and IFCS. Users must sign and return to FMS the Non-Disclosure agreement Return of a signed FMS Non-Disclosure agreement is required for all users who access FMS systems.

Users must secure the workstation from unauthorized use when leaving a browser session unattended while using the application.

While using the FACTS I, GFRS, IFCS, and SOD applications, users must have java script enabled.

US Department of the Treasury

Financial Management Service