Data warehouse use & access rules & access request form



Download 34.28 Kb.
Date29.01.2017
Size34.28 Kb.
#12051
DATA WAREHOUSE USE & ACCESS RULES & ACCESS REQUEST FORM
The Data Warehouse is a CUNY tool that provides each user with access to large volumes of confidential/sensitive data that can easily be downloaded either through Crystal Reports/Crystal object or, in some cases, in raw data format. As a result, each user needs to be vigilant regarding the handling of data downloads out of the Data Warehouse.
If information available within the Data Warehouse (“Data Warehouse information”) becomes available to personnel who should not have access to that information, the user responsible for this security lapse shall be held accountable for the actions of such personnel.
Data Warehouse users are hereby notified of the obligation to comply with the following rules in connection with the use and access of Data Warehouse information. A Data Warehouse user:


  • Shall use Data Warehouse information only for purposes authorized by appropriate CUNY management personnel.

  • Shall not open, review or otherwise use any Data Warehouse information in connection with which he or she has no direct work-related responsibilities.

  • Shall not disclose or provide access to any Data Warehouse information except to those having legal or otherwise permissible right thereto.

  • Shall password-protect access to Data Warehouse information at all times and shall not share the password. Users will be required to compose difficult-to-guess passwords and change them regularly.

  • Shall not use or store Data Warehouse information on any type of portable device or on any home computing equipment.

  • Shall maintain his or her computer’s operating and Internet browser software to current maintenance levels.

  • Shall maintain anti-virus, desktop firewall software and anti-spyware programs (as provided by the College and/or CUNY) to current levels of protection.

  • Shall not install any program on his or her computer which is not explicitly approved and authorized by his or her College and/or CUNY and not required to perform his or her assigned job responsibilities.

  • Shall not disable any security program installed on his or her computer for any reason, whether or not the computer is connected to a network.

  • Shall read, understand and comply with CUNY’s Policy on Acceptable Use of Computer Resources (Computer Use Policy) and IT Security Procedures located at security.cuny.edu under Security Policies and Procedures.

  • Shall immediately report any suspected or actual compromise of Data Warehouse information to the President (or equivalent) of the College and the CUNY CIO (Brian Cohen) and CISO (Carl Cammarata). Immediate steps shall be undertaken by the College to contain the compromise, determine the extent of the compromise, and maintain the environment in an unaltered state for purposes of further investigation.

  • Shall be responsible for any unauthorized access to or from his or her computer account and improper disclosure of Data Warehouse information.

  • Understands that any violation of these rules may subject Data Warehouse users to disciplinary proceedings in accordance with CUNY policies, rules and regulations, and applicable collective bargaining agreements.


ACKNOWLEDGMENT OF DATA WAREHOUSE USE & ACCESS RULES

I hereby acknowledge receipt of the Data Warehouse Use & Access Rules.


______________________________ (printed name)

____________________________________ (College/business area)


______________________________ (signed)


____________________________________ (date)



Please keep a copy of the Data Warehouse Use & Access Rules and return your signed form and Access Request form to the help desk (help.desk@mail.cuny) as an e-mail attached PDF document.

REQUEST FOR ACCESS TO CUNY ADMINISTRATIVE DATA WAREHOUSE

One form to be completed for each proposed Data Warehouse User.
Type of Request (circle one): Add/Replace Delete Date of Request: _______________

User Information

Name: ___________________________________________________ Phone No: _______________

College: __________________ e-Mail ID: ______________________________________________

Job Title: __________________________________ Department: ___________________________

Business Need: ____________________________________________________________________

__________________________________________________________________________________

__________________________________________________________________________________

Data Warehouse Use Agreement signed & returned (circle one)i: Yes No


Consultant: Yes No

If yes, please enter the name of your organization. ____________________________________________


If yes, please enter the length of your engagement. ____________________________________________

(i.e. – 30 days, 60 days or exact date range)



University Employment Status: Full Time Part Time

Campus: ___________________________________________

Is User a Student anywhere in the CUNY University system (circle one): Yes No

If Yes; 1) what College(s) is Student attending? _____________________________________________

2) What is Student’s enrollment status (circle one)? Part-time Full-time

If User is College or University Staff, what is their employment status (circle as appropriate)?

Full-time Part-time Temporary Contract

Supervisor Information

Name: ___________________________________________________ Phone No: _______________

College: __________________ e-Mail ID: ______________________________________________

Job Title: __________________________________ Department: ___________________________



College Approver Informationii

Name: ___________________________________________________ Phone No: _______________

College: __________________ e-Mail ID: ______________________________________________

REQUEST FOR ACCESS TO CUNY ADMINISTRATIVE DATA WAREHOUSE

One form to be completed for each proposed Data Warehouse User.
Job Title: __________________________________ Department: ___________________________

Access Request Approved (signed): ____________________________________ Date: __________



Crystal Reports Developer Access, please complete:

Access to College dataiii: _________________________________________________________________



College(s) Access level (see definitions below)

Access to data fields (circle those requested):





Human Resources***

Finance

Student

Payroll

Space Management

Fixed Assets

CAS (Freshman Admission)1

AS400 (Freshmen Admissions components and Transfer Student Admissions)2












Crystal Reports Enterprise Access, please complete:

Access to College dataError: Reference source not found: _________________________________________________________________



College(s) Access level (see definitions below)
Brief explanation of access levels:

View – Allows viewing of pre-scheduled instances of a report.

Schedule – Allows scheduling an instance of a report.

View on Demand – Allows on-demand, refreshed instance of a report.

Advanced Rights – Allows publishing of reports user owns, but not others.

Full Access – Allows publishing of reports and complete control of a report and folder.



Human Resources Approval

Any request for single campus HR access requires approval by the Campus HR Director. Access to multiple colleges HR requires approval of Ron Knight, Director, Central Office Human Resources, 646-578-7942

Name: ___________________________________________________ Phone No: _______________

College: __________________ e-Mail ID: ______________________________________________

Job Title: __________________________________ Department: ___________________________

Access Request Approved (signed): ____________________________________ Date: __________

REQUEST FOR ACCESS TO CUNY ADMINISTRATIVE DATA WAREHOUSE

One form to be completed for each proposed Data Warehouse User.
CAS (Freshman Admissions) Approver Information (Jim Murphy)
Name: James Murphy______________________________ Phone No: 212-290-5708

Job Title: University Associate Dean____ Department: Enrollment____

Access Request Approved (signed): ____________________________________ Date: __________
AS 400 (Freshmen Admissions components and Transfer Student Admission) Approver Information (James Murphy)

Name: James Murphy______________________________ Phone No: 212-290-5708

Job Title: University Associate Dean____ Department: Enrollment____

Access Request Approved (signed): ____________________________________ Date: __________




Administrative Sign-Off

University Information Security Officeriv: _________________________________ Date: _________

(Contact information under Contact Us at security.cuny.edu)

Data Warehouse Administration: ______________________________________ Date: _________

Citrix Administration: _______________________________________________ Date: _________

(For Crystal Reports Developer)

Directory Administration: ____________________________________________ Date: _________

(For Crystal Reports Enterprise)


Additional College Approver InformationError: Reference source not found

Name: ___________________________________________________ Phone No: _______________

College: __________________ e-Mail ID: ______________________________________________

Job Title: __________________________________ Department: ___________________________

Access Request Approved (signed): ____________________________________ Date: __________

Additional College Approver InformationError: Reference source not found

Name: ___________________________________________________ Phone No: _______________

College: __________________ e-Mail ID: ______________________________________________

Job Title: __________________________________ Department: ___________________________

Access Request Approved (signed): ____________________________________ Date: __________

Additional College Approver InformationError: Reference source not found

Name: ___________________________________________________ Phone No: _______________

College: __________________ e-Mail ID: ______________________________________________

Job Title: __________________________________ Department: ___________________________



Access Request Approved (signed): ____________________________________ Date: __________


*** Requires Human Resource approval. See “Human Resources Approval” above, and note Error: Reference source not found of the endnotes.

1 See required approval above

2 See required approval on next page

i Each individual will read and sign-off on the Data Warehouse Use and Access Agreement. This document is available at security.cuny.edu under Information Security Policy. Signed documents are to be returned to the helpdesk (help.desk@mail.cuny) as imaged attachments via e-mail.


ii Each College will identify more than one approver for data access requests originating from within their College. The approver must be identified by your College and agreed upon by your President, Provost, and VP of Administration. Your IT Steering Committee representative should also be included if it is someone different. The College must identify multiple approvers - e.g., one approver for each category of information; Human Resources, Student. All HR data must be signed by your College HR director. The list of authorized approvers and the categories of data for which they are authorized to approve will be submitted to the University Information Security Officer. Contact information is available under Contact Us at security.cuny.edu.


iii All requests for access will be limited to the College data in which the User is employed. Access to data that crosses College boundaries will be evaluated on a case-by-case basis.


iv In some cases, access requests may be subject to additional reviews.

October 2011, Version 0.2


Download 34.28 Kb.

Share with your friends:




The database is protected by copyright ©ininet.org 2024
send message

    Main page