2013 Army Financial Management & Defense Finance and Accounting Service Customer Workshop Defense Access Control System (DACS) Defense Finance Accounting Service (DFAS) & Army Initiative - Quad 1 Joseph Heron Andy Huynh Brandy Mullins LaRita Williams

Agenda  Background Audit Readiness Alternatives Current Process DACS Design and Process  Implementation Implementation Project Management Office (PMO) Cost Savings  Balanced Scorecard Strategy Map Alternatives  Conclusion

Audit Readiness  Government Accountability Office’s Federal Information Systems Controls Audit Manual (FISCAM) For information systems that are sensitive to financial reporting  Hyper-critical Control Domains for Audit Readiness AS-2 – Access control: Without effective application access controls, persons may obtain unauthorized or inappropriate access to applications and applications data AS-4 – Segregation of Duties – designed to prevent the possibility that a single person could be responsible for diverse and critical functions in such a way that errors or misappropriations could occur and not be detected in a timely manner, in the normal course of business process

Alternatives  Status quo  Agency specific solution Multiple systems access solution

Current Process

DACS Design  Web-based front end and Microsoft SQL Server 2012 Hosted by Defense Information Systems Agency to inherit DoD security compliance DoD CAC enabled  Relational Database Employee, Supervisors, Systems Role Conflict Management Oversight Activity  Interfaces Defense Civilian Personnel Data System (DCPDS) DoD Financial Management Systems  Audit Readiness Reviews, validations, approvals, documentation retrieval

DACS Process

Systems DACS ODSCAPSGFEBSDCPSDDRSDJMSPROBERbuilder Rbuilder II CAPS-W CAPS Clipper RSW- Online WAWFDCASSRD1ADSDMODDSWAAS

Implementation  Scope Per OPM.gov 16,430 DoD Agencies 500-GS FM series 14,947 Army Financial Management personnel  Project Management Office Seven General Schedule (GS) employees Nine contracted application developers  System Development Lifecycle Feasibility and Planning Development, Test, Production Maintenance  Begin in March 2015 and complete by March 2016 Two-tier approach with DoD Civilians and Army

Project Management Office (PMO)  Organization DFAS  Structure Lean and centralized organization  Operations Sustainment Helpdesk DACS access provisioning Training Day-to-day operations

Cost Savings

Customer Improve access request timelinessReduce over-aged pending requests Internal Business Process Increase efficiency for access request processing Improve timeliness of helpdesk ticket resolution Financial Achieve cost savings with DACSReduce document storage costs Learning & Growth Increase PMO Personnel with MSCA: SQL server certification Increase PMO Personnel with CompTIA Security+ certification Strategic Objectives Strategic Results Vision: To be a recognized leader in DoD’s financial management by consistently delivering first-class service and products. Customer Collaboration Achieve clearly defined, negotiated expectations through partnership that balance fact-based requirements, enterprise standards, and cost realities. DACS Link to DFAS Strategy Map Reduce Cost to Customers Improve Customer Satisfaction & Service Continuous Improvement Demonstrate a culture of innovation delivering new capabilities and improving existing operations

Conclusion  Payback period less than two years  Improved customer experience Timeliness  Auditability

Questions

Backup Slides

Current Process  DD2875 – System Access Request Form Manual Coordination Decentralized 15 minutes per access request routing  Employee  Supervisor  Site Security Office  Information Owner Representative (IOR)  Information Systems Security Officer (ISSO)  Update system user access

DACS Process  Workflow capability Employee, Supervisor, Security, IOR, ISSO 50% reduction in processing at each stage  Automated segregation of duties role conflict controls  Electronic Data Interchange Personal Identifier (EDIPI)  Link Employee to Supervisor DCPDS and Army In/out-processing  Interface to Financial Management systems to update roles based on approved access requests  Improved customer experience  More efficient processing

Balanced Scorecard  Strategy Map  Measures Financial Track cost savings with DACS Reduce access storage documentation cost Customer Timeliness of systems access processing Number of over-aged access requests Internal Business Processes Number of systems access processed timely Number of helpdesk tickets resolved timely Learning and Growth Number of PMO members certified in Microsoft SQL MSCA Number of PMO members certified in CompTIA Security+