2013 Army Financial Management &Defense Finance and Accounting Service

Customer Workshop

Defense Access Control System (DACS)

Defense Finance Accounting Service (DFAS) & Army

Initiative - Quad 1Joseph HeronAndy Huynh

Brandy MullinsLaRita Williams

Agenda

Background• Audit Readiness• Alternatives• Current Process• DACS Design and Process

Implementation• Implementation• Project Management Office (PMO)• Cost Savings

Balanced Scorecard• Strategy Map• Alternatives

Conclusion

Audit Readiness

Government Accountability Office’s Federal Information Systems Controls Audit Manual (FISCAM)• For information systems that are sensitive to financial reporting

Hyper-critical Control Domains for Audit Readiness• AS-2 – Access control: Without effective application access

controls, persons may obtain unauthorized or inappropriate access to applications and applications data

• AS-4 – Segregation of Duties – designed to prevent the possibility that a single person could be responsible for diverse and critical functions in such a way that errors or misappropriations could occur and not be detected in a timely manner, in the normal course of business process

Alternatives

Status quo Agency specific solution

• Multiple systems access solution

Current Process

Current Process

DACS Design

Web-based front end and Microsoft SQL Server 2012• Hosted by Defense Information Systems Agency to inherit DoD

security compliance• DoD CAC enabled

Relational Database• Employee, Supervisors, Systems• Role Conflict• Management Oversight• Activity

Interfaces• Defense Civilian Personnel Data System (DCPDS) • DoD Financial Management Systems

Audit Readiness• Reviews, validations, approvals, documentation retrieval

DACS Process

Systems

DACS

ODSCAPS

GFEBS

DCPS

DDRS

DJMS

PROBE

Rbuilder

Rbuilder II

CAPS-WCAPS Clipper

RSW-Online

WAWF

DCAS

SRD1

ADS

DMO

DDS

WAAS

Implementation

Scope• Per OPM.gov

• 16,430 DoD Agencies 500-GS FM series• 14,947 Army Financial Management personnel

Project Management Office• Seven General Schedule (GS) employees• Nine contracted application developers

System Development Lifecycle• Feasibility and Planning• Development, Test, Production• Maintenance

Begin in March 2015 and complete by March 2016• Two-tier approach with DoD Civilians and Army

Project Management Office (PMO)

Organization• DFAS

Structure• Lean and centralized organization

Operations• Sustainment• Helpdesk• DACS access provisioning• Training• Day-to-day operations

Cost Savings

Customer Improve access request timeliness Reduce over-aged pending requests

Internal Business Process Increase efficiency for access request processing

Improve timeliness of helpdesk ticket resolution

Financial Achieve cost savings with DACS Reduce document storage costs

Learning & Growth Increase PMO Personnel with MSCA: SQL server certification

Increase PMO Personnel with CompTIA Security+ certification

StrategicObjectives

Strategic Results

Vision: To be a recognized leader in DoD’s financial management by consistently delivering first-class service and products.

Customer CollaborationAchieve clearly defined, negotiated expectations through partnership

that balance fact-based requirements, enterprise standards,

and cost realities.

DACS Link to DFAS Strategy Map

Reduce Cost to Customers Improve Customer Satisfaction & Service

Continuous ImprovementDemonstrate a culture of innovation delivering new

capabilities and improving existing operations

Conclusion

Payback period less than two years Improved customer experience

• Timeliness

Auditability

Questions

Backup Slides

Current Process

DD2875 – System Access Request Form• Manual• E-mail Coordination• Decentralized• 15 minutes per access request routing

Employee Supervisor Site Security Office Information Owner Representative (IOR) Information Systems Security Officer (ISSO) Update system user access

DACS Process

Workflow capability• Employee, Supervisor, Security, IOR, ISSO• 50% reduction in processing at each stage

Automated segregation of duties role conflict controls Electronic Data Interchange Personal Identifier (EDIPI) Link Employee to Supervisor

• DCPDS and Army In/out-processing

Interface to Financial Management systems to update roles based on approved access requests

Improved customer experience More efficient processing

Balanced Scorecard

Strategy Map Measures

• Financial• Track cost savings with DACS• Reduce access storage documentation cost

• Customer• Timeliness of systems access processing• Number of over-aged access requests

• Internal Business Processes• Number of systems access processed timely• Number of helpdesk tickets resolved timely

• Learning and Growth• Number of PMO members certified in Microsoft SQL MSCA• Number of PMO members certified in CompTIA Security+