Dear Colleagues,
Upon the completion of an extensive analysis of enterprise-wide administrative system access roles and role combinations, it was discovered that the University of Illinois System has been exposed to potential risks that must be addressed. Specifically, the role combinations which create segregation of duty risks include:
- iBuy Requestor & FABweb Unit Rep, Unit Contact, Unit Head or Unit Specialist
- iBuy Approver & FABweb Unit Rep, Unit Contact, Unit Head or Unit Specialist
- Banner Department Manager or Banner Department Requestor with FABweb Unit Rep, Unit Contact, Unit Head, or Unit Specialist
- P-Card Cardholder and FABweb Unit Rep, Unit Contact, Unit Head, or Unit Specialist
As a result, the Implementation Team will be working with units and departments to update the security application process so that users are prevented from having these role combinations. The Implementation Team will also assist in transitioning current users to appropriate roles to maintain internal control.
We tasked the Implementation Team with identifying pilot units comprised of staff members at UIUC, UIC, and UIS along with system offices, to begin the process of resolving the above role combinations. This will help us learn about the impact that separation, removal and reassignment of duties will have on the affected units and allow us to assist our colleagues as best as we can through the process. The leadership understands that separating some roles might come as a challenge to units, however, the Implementation Team will work diligently with pilot units to alleviate any delays and ensure this effort does not cause interruptions to our processes and workflow. Members of the Implementation Team will participate in the next UIUC BMG Meeting on March 10, therefore please feel free to engage with them should you have any questions or concerns.
The successful completion of this task will improve oversight on role segregation relative to procurement, accounts payable, fixed asset, and supporting business systems. We appreciate your cooperation as procedures that monitor transactions and systems access are improved to mitigate risks and protect the entire University of Illinois System.
Paul Ellinger
Associate Chancellor and Vice Provost for Budget and Resource Planning
Brent Rasmus
University of Illinois-System Offices