Cybersecurity and UCPath to change the way ANR does business

When ANR joins UCPath in the spring, it will introduce new technology that will ultimately unify and standardize payroll, benefits and human resources systems for all UC employees. As we adopt new technology to modernize ANR business systems, we are strengthening our online security measures.

In a recent webinar to prepare ANR office managers and others for the transition to UCPath in the spring, John Fox, Human Resources executive director, brought in Dave Krause, manager of web development and applications programming, to discuss multi-factor authentication to access online systems, and Emily LaRue, associate director of the Business Operations Center, to discuss the impact of UCPath on the Business Operations Center.

Multi-factor authentication

To use an online system that is operated by UC Davis for ANR, such as the time reporting system, KFS, Aggie Buy or AggieTravel, an ANR employee logs into a form. Historically, once your credentials are “authenticated” against a database hosted by UC Davis, you are redirected to the system and off you go. Another step is being added to protect the system from hackers. A tool called “Duo” will ask you for a second form of authentication.

“Duo seamlessly adds this second form of authentication right in the login form,” Krause said. “For this example, I have preset Duo to send the second authentication to my phone as a 'push notification' (a mobile phone alert that appears onscreen while the phone is still in locked mode). Duo will also happily call you or send you a code to use instead.” 

Once the user clicks “approve,” the website immediately accepts the second authentication and opens the site.

Mobile phones, tablets and Apple watches are among the devices supported by Duo. “It doesn't take up much space on your device,” Krause said.

For employees who don't have mobile devices for authentication, physical tokens that connect directly to your computers will be available. Currently, only mobile devices are eligible for enrollment. More information about tokens will be available soon.

If you lose or forget your device or token, UC Davis IET Express help desk can send you a temporary access code.

UC ANR will be rolling out Duo for its identity management system next year. Volunteers, affiliates and collaborators will have unchanged access.

“We are now inviting all UC ANR employees who use UC Davis systems to enroll in Duo via a smartphone or tablet,” Krause said. “Be sure you use a device that is with you when you work!”

For details on Duo enrollment and setting it up, go to http://ucanr.edu/mfa.

Impact of UCPath on Business Operations Center

Becoming its own business unit with UCPath will increase ANR's visibility as equivalent to the 10 campuses and change its business relationship with UC Davis. In addition, ANR's responsibility for compliance and accountability will take on even greater importance. Implementation of UCPath will create some changes to ANR's Business Operations Center, including the location of ANR's UCPath payroll team, work assignments and responsibilities, and systems and processes.

“For the first several weeks, everything will seem different!” LaRue said.

Personnel action entry functions for new hires, terminations and pay changes will be performed by ANR HR or the UCPath Central Team. A single ANR BOC Payroll unit composed of a payroll manager and three staff members will be located in Davis. The BOC will be responsible for audits and additional reporting and there will be new terms, different business processes, and different routing of forms and documentation.

LuRue expects the following to remain the same:

• Payroll (time and leave reporting) processing

          o   Timely submission for all organizational units

          o   Time Reporting System review and corrections as needed

• Service level

          o   ANR UCPath Hypercare Team – Group devoted to resolution of ANR employee issues

• Processing of financial transactions

          o   BOC-Kearney – UCCE (Gifts excluded)

          o   BOC-Davis – Statewide programs, Research and Extension Centers and administrative units

For more information about UCPath changes, visit the website at https://ucanr.edu/ucpath.

 

Read more