Resource Access Control Facility (RACF) User ID Procedures

Each CFO RACS Units general ledger resides on a mainframe housed in the MCC. The technical security controls protecting the mainframe are provided by a security package known as the Resource Access Control Facility (RACF). Each RRACS user will be required to have a defined user ID, and account profile on the MCC mainframe to perform assigned duties.

RACS RACF administration has been assigned to the local center's Data Security Function with the accounting branch's RRACS DBA serving as the RRACS functional security coordinator.

The RACF Administrator duties include the following (also see IRM 10.8.2 , Information Technology (IT) Security, IT Security Roles and Responsibilities for additional guidance):

Create new RRACS user based on information provided on BEAR entitlement request.

Connect new RRACS user to the default RRACS group for the local site if requested from the RRACS Management BEARS, connect new RRACS user to a predefined user profile group.

Upon request from RRACS Management Official, revoke permissions for local RRACS users who leave the unit or go on extended leave or detail.

Upon request from RRACS Management Official, restore permissions for local RRACS users returning from leave or detail.

Generate, review and distribute appropriate security reports (audit trails, security violations, etc.) through Data Security staff channels to local RRACS management on a timely basis. If necessary, coordinate with MCC RACF Administration on incident reports.

Coordinate with RRACS LAN System Administrator to ensure RRACS user profiles on the MCC Host are synchronized with those on the RRACS LAN.