Tribal Security Officer (TSO) Responsibilities
Tribes
- Provide both a primary and at least one backup Tribal Security Officer, to ensure that security functions can continue if the primary Tribal Security Officer is unavailable
- Inform NFC of TSO personnel or contact information changes
Tribal Security Officers
- Provide security awareness briefing to all employees upon receipt of an NFC user ID
- Ensure that access is being requested in compliance with the Tribe's security policy
- Submit properly completed requests for security access, listing user ID(s) and all required resources
- Protect PII data by encrypting security access request e-mail attachments and providing the password to NFC via telephone only
- Immediately suspend users who have separated
- Notify NFC of changes in access authority or employment status
- Request and/or review security access reports to ensure that only currently employed, authorized users have access to Tribe resources
- Refrain from requesting security access changes for your own user ID
- Provide proper justification for expedited security access requests
- Use your access to provide only assigned, authorized functions
- Call the NFC Operations and Security Center (OSC) at 1-800-767-9641 to report issues outside of your control
- Attend quarterly TSO training as needed
Add or Change Security Access
Requests for Security Access (AD-3100-T forms) are submitted by Tribal Security Officers via ServiceNow (non-eAuth).
Properly completed requests will be processed within five business days. Please note that improperly completed forms will be returned, thereby increasing the time required to process your request.
The subject line should contain a description of the requested access change, such as ‘Add Security Officer to Tribal Security Officer List’ or ‘Delete application from role’.
For New User requests, the following data elements are required:
Indicate action needed: add
- Tribal Employer
- User Name
- Role
- POI
- Phone #
- E-mail address
- Last 4 of the SSN
For Security Officer Change requests, the following data elements are required:
Indicate action needed for the applicable data elements: add, modify, or delete
- Tribal Employer
- User Name
- Role
- POI
- Phone #
- E-mail address
If there are problems with Security Access after it has been administered, the Tribal Security Officer should contact the Operations and Security Center (OSC) at 1-800-767-9641, or email osc.etix@usda.gov.
Remove Security Access
Accounts that have been inactive for 30 days are listed on a report by Agency. Each Agency is advised on actions to take to prevent the account from being suspended. This can be accomplished by a user signing on to his or her account.
If the accounts are still inactive at 60 days, they are automatically suspended. After 120 days, inactive accounts are deleted. Insurance Security Officers have the ability to review and request security access reports.
A user’s security access must be removed by the losing Tribal Security Officer when he/she is transferred or separates from employment.
If there are problems with Security Access after it has been administered, the Tribal Security Officer should contact the Operations and Security Center (OSC) at 1-800-767-9641, or email osc.etix@usda.gov.