SFC2007 Security Awareness & USM management Training For Member State Liaison and Liaison Deputy Officers System for Fund management in the European Community System for Fund management in the European Community

Course Overview 1.The Role of the MSL & MSLd 2.The USM Module 3.SFC2007 Reporting 4.What Happens Next? 5.The SFC2007 Support Team 6.Question and Answer Session

1.The Role of the MSL & MSLd a.Identification & Verification of user entitlement b.Reset Password requests c.Creation (and update) of access request for Member State users d.Dissemination of information regarding Support & Training for SFC2007 to users e.Administration as MSL/MSLd

1.The Role of the MSL & MSLd (1) a.Identification & Verification of user entitlement Prevention of unauthorised access or performance of unauthorised transactions: –Ensure roles are requested based on job roles & responsibilities of the user –Ensure leaver accounts in SFC2007 are disabled in a timely manner Accounts for users who have left their role/organisation should under no circumstance be used by another user (max 5 working days)

1.The Role of the MSL & MSLd (2) Prevention of unauthorised access or performance of unauthorised transactions (cont.-): –Ensure removal of roles for users changing position within the organisation –Ensure user awareness that usernames are unique and should not be shared amongst colleagues –Ensure password settings for local applications accessing SFC2007 via WebServices are set according to leading market practices.

1.The Role of the MSL & MSLd (3) Prevention of unauthorised access or performance of unauthorised transactions (cont.-): –Systematic clean-up of USM access rights –Using Reporting Functionality in SFC2007

1.The Role of the MSL & MSLd b.Creation (and update) of access request for Member State Users via SFC2007 User & Security Module –The search of existent users before encoding a request for the creation of a new user account. –Update of user details, in particular a frequent monitoring on users addresses –Disabling a user account

1.The Role of the MSL & MSLd c.Resetting Passwords: Passwords expire after 90 days Lost/Forgotten password? Contact SFC2007 Support: –Include username in the –First half sent to user, second half to MSL(d) Usernames are personal!!!!! –Resets will only be processed if requested by user or MSL(d) (1st half sent to user in USM)

1.The Role of the MSL & MSLd d.Dissemination of information regarding Support & Training for SFC2007 to users: Awareness of the SFC2007 Help page: Requesting/organisation of training curriculum for users Promote use of the SFC2007 Training environment for training purposes:

1.The Role of the MSL & MSLd e.Administration as MSL/MSLd Informing SFC2007 Support Team of changes to your role as MSL/MSLd Nomination of a new MSL/MSLd before departure

2.The USM Module The USM tool allows the MS liaisons to enter directly their requests for access via SFC2007. Treatment of the request is quick and easy: –Inconsistencies/missing info is detected automatically –Information on processed/returned requests is automatic Access codes are sent automatically to the user and confirmation to the MSL.

2.The USM Module Accessible via the SFC2007 Application: –Utilities > Access Requests Requests to create/update/disable user accounts –Utilities > Contacts & Users Review user accounts managed by you MS liaison enters the request via SFC2007 > utilities > Access Request The SFC2007 Support team processes it USM automatically notifies the user and the MS liaison

2.The USM Module D EMO

3.SFC2007 Reporting Generate reports via Utilities > Reports –Excel or PDF file containing a list of your users, their roles and last active date Recommended to be carried out on a regular basis –e.g. trimestral or quarterly

4.What Happens Next? You will now be granted access to the application as MSL or MSLd –Reception of personal username/access codes –Creation of access requests via the USM If you require access to SFC2007 (viewing programme information) –you must request access (as a specific Authority) via the USM. IMPORTANT: We must receive the signed Acceptance Letter by post within 2 calendar weeks of reception of your scanned letter.

5.SFC2007 Support Team The SFC2007 Support Team: –Sophie, Nathalie & Juliana –Available for: IT support & helpdesk General application inquiries Training & coaching Access request to Circa

6.Question & Answer Session Do you have any questions on todays training ? Thank you for your participation.