Office of the
      State Controller

Security Policy

Please refer to Chapter 10 of the Fiscal Procedures Manual for the most current version of the Statewide Security Policy for Access to the State Financial System.

Security Administration for State Financial Systems

The State Controller may delegate security administration responsibility to department controllers.  These agencies must demonstrate the ability to adequately maintain security over the processing of transactions and access of information in the Colorado Financial Reporting System (COFRS).

Questions about security administration should be directed to the Statewide Security Administrator, Susan Thomson, at (303) 866-4161.

These documents may be presented in PDF format, which requires the Adobe® Reader.

Portable Document Format (.pdf)
  Word document (.doc)

Procedures

For all state agencies except for Institutions of Higher Education: 

For Top Secret User ID:

Before access to the State Financial System can be established, the user must have a state mainframe, or Top Secret, user ID.  

To obtain a Top Secret user ID:

1. Complete Top Secret Security Request Form and obtain approval of your manager.

2. Submit form to agency top secret administrator or OIT.

For user to obtain access to COFRS, Financial Data Warehouse, and Document Direct:

1. Complete and sign the Security Request Form for COFRS, Financial Data Warehouse, Document Direct, and obtain the approval of the department controller. 

2. Read and sign the Statement of Compliance for Computer Usage and Data Security form.

3. Submit completed request form and Statement of Compliance to your agency’s security administrator.

For user to obtain access to CPPS and Human Resources Data Warehouse:

1. Complete and sign the Security Request Form for CPPS and HR Data warehouse, and obtain the approval of the department controller.

2. Read and sign the Statement of Compliance for Computer Usage and Data Security form.

3. Submit completed request form and Statement of Compliance to your agency’s security administrator.

For user to obtain access to KRONOS:

1. Complete and sign the KRONOS Security Authorization Form and obtain the approval of the department controller.
2. Read and sign the Employee Statement of Compliance on the KRONOS Security Authorization Form.
3. Submit completed form to your agency’s KRONOS Administrator.

See below for links to these forms.

For Institutions of Higher Education: 

For COFRS, Financial Data Warehouse, and Document Direct:

• See policies, procedures, and forms at:

http://www.colorado.gov/dpa/dfp/sco/FAC/Security/Security.htm

For CPPS and Human Resources Data Warehouse:

• Follow the instructions above for state agencies.

Policies

• System Security and Use – Standard Operating Procedure #8808

Forms  

• Mainframe TSS Access Authorization Form
• Security Request Form – COFRS, Financial Data Warehouse, and Document Direct
• Security Request Form – CPPS and HR Data Warehouse
• KRONOS Security Authorization Form

Other Documents

• Statement of Compliance for Computer Usage and Data Security
• Delegated Security Administration Agreement
• Security Administration Agreement Concerning CPPS and HRDW
• Letter of Certification for COFRS, FDW and DD
• Letter of Certification for CPPS and HRDW

Return to Authoritative Guidance Page