Tribal Security Officer (TSO) Responsibilities
Tribes
- Provide both a primary and at least one backup Tribal Security Officer, to ensure that security functions can continue if the primary Tribal Security Officer is unavailable
- Inform NFC of TSO personnel or contact information changes
Tribal Security Officers
- Provide security awareness briefing to all employees upon receipt of an NFC user ID
- Ensure that access is being requested in compliance with the Tribe's security policy
- Submit properly completed requests for security access, listing user ID(s) and all required resources
- Protect PII data by encrypting security access request e-mail attachments and providing the password to NFC via telephone only
- Immediately suspend users who have separated
- Notify NFC of changes in access authority or employment status
- Request and/or review security access reports to ensure that only currently employed, authorized users have access to Tribe resources
- Refrain from requesting security access changes for your own user ID
- Provide proper justification for expedited security access requests
- Use your access to provide only assigned, authorized functions
- Call the NFC Operations and Security Center (OSC) at 1-800-767-9641 to report issues outside of your control
- Attend quarterly TSO training as needed
Add or Change Security Access
Requests for Security Access are submitted by Tribal Security Officers via ServiceNow (non-eAuth).
Security Access Forms with all mandatory fields properly completed will be processed within the timeframe defined in Service Level Agreements, depending upon complexity and number of users affected. Please note that improperly completed security access request forms will be returned requiring a 48 business hours response for clarification, thereby increasing the time required to process the request.
Remove Security Access
Each Tribe is advised to take preventive actions to staled accounts by compliance with theTribal Security Officer Roles and Responsibilities IAW the Insurance Security Officer Reference Guide. The Tribal Security Officer is to immediately inform NFC Access Management Team of challenges using the agreed upon standard business operationg process.