SFC2007 SFC2007 Security Awareness & USM Security Awareness & USM

management Trainingmanagement TrainingFor Member State Liaison and Liaison Deputy For Member State Liaison and Liaison Deputy

OfficersOfficers

System for Fund management in the European CommunitySystem for Fund management in the European Community 2007-20132007-2013

Course OverviewCourse Overview

1. The Role of the MSL & MSLd

2. The USM Module

3. SFC2007 Reporting

4. What Happens Next?

5. The SFC2007 Support Team

6. Question and Answer Session

1.The Role of the MSL & MSLd1.The Role of the MSL & MSLd

a. Identification & Verification of user entitlement

b. Reset Password requests

c. Creation (and update) of access request for Member State users

d. Dissemination of information regarding Support & Training for SFC2007 to users

e. Administration as MSL/MSLd

1.The 1.The RoleRole of the MSL & of the MSL & MSLd (1)MSLd (1)

a. Identification & Verification of user entitlement

• Prevention of unauthorised access or performance of unauthorised transactions:

– Ensure roles are requested based on job roles & responsibilities of the user

– Ensure leaver accounts in SFC2007 are disabled in a timely manner

• Accounts for users who have left their role/organisation should under no circumstance be used by another user (max 5 working days)

1.The Role of the MSL & MSLd (2)1.The Role of the MSL & MSLd (2)

• Prevention of unauthorised access or performance of unauthorised transactions (cont.-):

– Ensure removal of roles for users changing position within the organisation

– Ensure user awareness that usernames are unique and should not be shared amongst colleagues

– Ensure password settings for local applications accessing SFC2007 via WebServices are set according to leading market practices.

1.The Role of the MSL & MSLd (3)1.The Role of the MSL & MSLd (3)

• Prevention of unauthorised access or performance of unauthorised transactions (cont.-):

– Systematic clean-up of USM access rights

– Using Reporting Functionality in SFC2007

1.The Role of the MSL & MSLd1.The Role of the MSL & MSLd

b. Creation (and update) of access request for Member State Users

• via SFC2007 User & Security Module

– The search of existent users before encoding a request for the creation of a new user account.

– Update of user details, in particular a frequent monitoring on users email addresses

– Disabling a user account

1.The Role of the MSL & MSLd1.The Role of the MSL & MSLd

c. Resetting Passwords:

• Passwords expire after 90 days

• Lost/Forgotten password? Contact SFC2007 Support:

– Include username in the email

– First half sent to user, second half to MSL(d)

• Usernames are personal!!!!!

– Resets will only be processed if requested by user or MSL(d) (1st half sent to user email in USM)

1.The Role of the MSL & MSLd1.The Role of the MSL & MSLd

d. Dissemination of information regarding Support & Training for SFC2007 to users:

• Awareness of the SFC2007 Help page: http://ec.europa.eu/employment_social/sfc2007/sfc2007_help/index.htm

• Requesting/organisation of training curriculum for users

• Promote use of the SFC2007 Training environment for training purposes: https://webgate.training.ec.europa.eu/sfc2007/frontoffice

1.The Role of the MSL & MSLd1.The Role of the MSL & MSLd

e. Administration as MSL/MSLd

• Informing SFC2007 Support Team of changes to your role as MSL/MSLd

• Nomination of a new MSL/MSLd before departure

2.The USM Module2.The USM Module

• The USM tool allows the MS liaisons to enter directly their requests for access via SFC2007.

• Treatment of the request is quick and easy:

– Inconsistencies/missing info is detected automatically

– Information on processed/returned requests is automatic

• Access codes are sent automatically to the user and confirmation to the MSL.

2.The USM Module2.The USM Module

• Accessible via the SFC2007 Application:

– Utilities > Access Requests

• Requests to create/update/disable user accounts

– Utilities > Contacts & Users

• Review user accounts managed by you

MS liaison enters the request via

SFC2007 > utilities > Access Request

The SFC2007 Support team processes it

USM automatically notifies the

user and the MS liaison

2.The USM Module2.The USM Module

DEMO

3.SFC2007 Reporting3.SFC2007 Reporting

• Generate reports via Utilities > Reports

– Excel or PDF file containing a list of your users, their roles and last active date

• Recommended to be carried out on a regular basis

– e.g. trimestral or quarterly

4.What Happens Next?4.What Happens Next?

• You will now be granted access to the application as MSL or MSLd

– Reception of personal username/access codes

– Creation of access requests via the USM

• If you require access to SFC2007 (viewing programme information)

– you must request access (as a specific Authority) via the USM.

• IMPORTANT: We must receive the signed Acceptance Letter by post within 2 calendar weeks of reception of your scanned letter.

5.SFC2007 Support Team5.SFC2007 Support Team

• The SFC2007 Support Team:

– Sophie, Nathalie & Juliana

– Available for:

• IT support & helpdesk

• General application inquiries

• Training & coaching

• Access request to Circa

6.Question & Answer Session6.Question & Answer Session

• Do you have any questions on today’s training ?

• Thank you for your participation.