Management and Control Of Mainframe User ID's To: "USGS Employees" From: "Donald E Watson, Reston, VA" (Don Watson) Subject: Management of Computer User ID's X-Mailer: To: All U.S. Geological Survey Employees and Contractors From: Don Watson, Bureau ADP Security Officer Subject: Management and Control Of Mainframe User ID's This message is to remind all users of the U.S. Geological Survey (USGS) mainframe of their responsibilities associated with their access privileges. The USGS mainframe is a valuable computing resource of the bureau and processes some of our most sensitive information. Because of this, it is crucial that we provide the maximum protection possible. A very important security safeguard is the manner in which the user manages his or her access to the system. In addition to maintaining the absolute privacy of their network, computer, or application passwords, users must also ensure that they execute proper control over the use of their User ID's. The User ID is the only method that system administrators have to help users and monitor their activities. Problems related to user activities, whether they are the result of innocent mistakes on the part of the user or actual attempts to defeat system or internal controls, can only be analyzed or solved if the user can be uniquely identified. Users of USGS computer systems, including the mainframe, are responsible for all activities associated with their User ID's. Survey Manual Chapter 600.2 requires that users who are being transferred to another organization within the USGS or separated from the bureau notify the system or security administrators of any network, computer, or application on which they are registered of their change of status. Notification must take place prior to the date of this action. This ensures that their User ID's are suspended as soon as possible. Timely action, on the part of the employee or contractor, will minimize the risk of their access to the system being compromised or information under their control accidently destroyed. If you have any questions regarding USGS computer security policies or your responsibilities as users of USGS systems, please call me at (703) 648-7046 or send an e-mail message to dwatson@usgs.gov.