Comptroller Fiscal Year Memo Letter Head


M E M O R A N D U M

To:Security Officers and Chief Fiscal Officers
From:Martin J. Benison, Comptroller
Date:November 30, 2009
Re:Security Officer Review - Statewide Enterprise Systems Security

Comptroller Memo
FY#2010-13

Executive Summary

Enterprise systems provide access to sensitive data and allow users to process financial transactions. Annually, Security Officers are asked to review individuals that have access to these systems to ensure that they have correct and fiscally appropriate access.





 






 

The Enterprise Security Policy requires Department Security Officers to certify security access to enterprise systems annually. This certification is due at the end of the calendar year. Department Heads provide this approval at the end of the Fiscal Year, thus a formal review is performed every six months. This review includes all enterprise systems:

  • CIW: The Commonwealth Information Warehouse which provides access to financial, labor cost management, time and attendance, human resources, and payroll data for MMARS, LCM, UMASS, and HR/CMS, as well as, a variety of historical databases-Classic MMARS, PMIS, CAPS, PARIS, and PCRS.
  • HR/CMS : The Human Resource/Compensation Management System which supports time and attendance, human resources, and payroll.
  • Intempo : The on-line security system which your Department Security Officer and Security Administrators use to request access to enterprise systems through the Information Technology Division.
  • MMARS : The Massachusetts Management Accounting and Reporting System, the financial system designed to support the fiscal functions performed by the Commonwealth departments.

In anticipation of the HR/CMS upgrade, departments should closely review access for their users and make necessary adjustments through Intempo.

Please review all security reports, process whatever changes are appropriate and provide this certification on the Department Security Officer Annual Review Form doc format of dso_annul_review_frm.doc
and e-mail it to securityrequest@massmail.state.ma.us no later than December 31, 2009. The latest enterprise security reports are available via Doc Direct as of December 1, 2009. We will re-run the reports again on December 17 th in order for you to certify your changes have been made.

The Comptroller's Security Unit is available to answer any questions and assist you with MMARS issues - contact Dan Frisoli at (617) 973-2614 or ITD's CommonHelp (866) 888-2808 is available to answer any questions and assist you with security for CIW, HR/CMS and Intempo.

Thank you for your prompt attention to this task.

 

cc:MMARS Liaisons
 Payroll Directors
 General Counsels
 Internal Distribution