annual security awareness

8/8/2019 Annual Security Awareness

1/21

Roles and Responsibilities and Security-Related Requirements

SLDCADASLDCADA


2/21

Naval Sea Logistics Center 2

Areas to be AddressedAreas to be Addressed

Laws and Policies Governing Protection ofPersonal Information

User Responsibilities SLDCADA Default Roles and Responsibilities


3/21


Laws and Policies GoverningLaws and Policies GoverningProtection of PersonalProtection of PersonalInformationInformation


4/21


Freedom of Information ActFreedom of Information Act

Enacted in 1966 to provide universal access toofficial information

Categories that are exempt from FOIA: Classified information

Internal rules and practices

Information denied by other specific withholding

statutes Trade secrets and commercial or financial

information given in confidence


5/21


FOIA (cont.)FOIA (cont.)

More categories that are exempt from FOIA:

Inter- and intra-agency communication

Personal information protected by Privacy Act Investigative information compiled for law

enforcement

Reports on financial institutions

For additional Info on FOIA:http://www.defenselink.mil/pubs/foi/


6/21


Public LawPublic Law9393--579, U.S.C579, U.S.C 552a552a

Privacy Act of 1974

Virtually all data within SLDCADA contains sensitive

but unclassified (SBU) information that is subject toprotection from disclosure under the Privacy Act of1974.

Examples of privacy information not releasable topublic

Date of Birth Home AddressHome Tel. No. Home E-Mail

Net Salary Deductions

Debts Leave Balance


7/21


User Responsibilities


8/21


User ResponsibilitiesUser Responsibilities

Safeguard SBU and Privacy Act data

Log off when finished

Protect the computer screen from casual observers Destroy reports (shredding or burning)

Secure reports in an NSA-approved container

Dont share information with anyone who doesnt

have a need to know


9/21


Terminal User ResponsibilityTerminal User Responsibility

Protect your password; do NOT write itdown and doNOT divulge it to anyone

Use only the user ID and password you wereassigned

Protect your keyboard and screen whileentering your password

DoNOT leave your terminal unattendedwhile logged into SLDCADA. Instead, log offor lock your terminal.


10/21


Individual AccountabilityIndividual Accountability

SLDCADA accounts are issued for theperformance of official duties only. Any other

use is strictly prohibited. Users cannot certify their own records


11/21


Your ResponsibilityYour Responsibility

It is your responsibility to protectemployee information that youprocess!


12/21


SLDCADA Default Rolesand Responsibilities


13/21


OverviewOverview

Timekeeping Guidelines

Specific Areas of Responsibility:

Self-User Timekeeper

Certifier

Customer Service Representative (CSR)

SLDCADA Site Administrator

SLDCADA CDA


14/21


Timekeeping GuidelinesTimekeeping Guidelines

Agencies policies control Time andAttendance (T&A), ensuring that data:

Is recorded promptly, completely, and accurately Reflects actual work performed and leave taken

Is sufficiently detailed to allow certification

Complies with legal requirements

Is supported by recorded evidence of supervisorreview and approval


15/21


Timekeeping GuidelinesTimekeeping Guidelines

Agencies must ensure reasonable controls exist to ensure

accuracy of T&A data

Integrity of T&A recorded depends on conscious

oversight of supervisors, timekeepers, certifiers, or other

approving authority

Official most knowledgeable of time worked should

approve overtime and/or clocks

T&A should be approved at the end of the last day of the

pay period or later


16/21


SelfSelf--User ResponsibilitiesUser Responsibilities

Review T&A to and review to ensureaccuracy and completeness prior tocertification

T&A should be approved at the end of thelast day of the pay period or later

Notify Certifier when T&A is available for

certification Generate SLDCADA reports:

Incorrect Hours


17/21


Timekeeper ResponsibilitiesTimekeeper Responsibilities

Responsible for self or group of employees

Record work schedule, shift, and

predetermined JON changes Record T&A

Review T&A to ensure accuracy and

completeness prior to certification


18/21



Notify Certifier when T&A is available forcertification

Enter prior pay adjustments Notify Certifier when prior pay is available

for certification


19/21



Generate SLDCADA reports:

Incorrect Hours

Unsent Prior Pay Corrections (v22: Pending PriorPay Corrections)


20/21


Certifier ResponsibilitiesCertifier Responsibilities

Review time for assigned employees toensure accuracy

Correct incorrect time or refer to employee/Timekeeper

Certify time

E

nter/certify prior pays Maintain Primary/Alternate Timekeepers

and Alternate Supervisors


21/21


Certifier ResponsibilitiesCertifier Responsibilities

Generate SLDCADA reports:

Incorrect Hours

UncertifiedE

mployees Unsent Prior Pay Corrections (v22: Pending Prior

Pay Corrections)

annual security awareness

Documents