May 19, 2022
Dear colleagues,
A new exception request webform is now available on the Internal Controls webpage, which can be used to request an exception to the prohibited system access combinations. All submitted requests will go through three levels of review and approval: unit-level, college-level, and university-level. Register for a live demonstration session to learn more about the process.
The exception request process allows for the provisioning of system access combinations for procurement and equipment tracking applications that create significant segregation of duty risks. Specifically, these roles combinations are as follows:
- iBuy Requestor with FABweb Unit Rep or Biennial Unit Contact
- iBuy Approver with FABweb Unit Rep or Biennial Unit Contact
- Banner Department Manager/Requestor with FABweb Unit Rep or Biennial Unit Contact
- P-Card Cardholder with FABweb Unit Rep or Biennial Unit Contact
When new rules were implemented to restrict these system access combinations within the Security Application, new high-risk system access combinations could no longer be provisioned. This effort aims to reduce the prevalence of high-risk role combinations. To that end, units need to explore resources to learn more about the roles and ways to avoid requesting conflicting role combinations through the exception process. If the roles are still necessary for a unit to be able to conduct its business, then the exception request form may be used to request an exception for these restricted system access combinations. The exception request process involves identifying and implementing other internal control measures that effectively lower the risk of an employee having these system access combinations and allows departmental business functions to continue.
We want to thank the representatives from the three universities and the System Offices who participated in creating, reviewing, and implementing this new process. We also want to acknowledge the hard work and dedication of all of you who have been affected by these changes. Your feedback and expertise have helped improve the internal controls for the entire University of Illinois System.
Paul Ellinger
Interim Vice President, Chief Financial Officer, and Comptroller
Arnold Henning
Interim Vice Chancellor for Finance and Administration, UIS
Janet Parker
Vice Chancellor, Budget HR and Financial Administration, UIC
Vicky Gress
Acting Associate Chancellor and Vice Provost for Budget and Resource Planning, UIUC
Brent Rasmus
Controller & Senior Assistant Vice President for Business and Finance