| Security Awareness |
|
| The Grants
Online Program Management Office takes system
security very seriously. Grants Online is the
official system of records for all NOAA grants
related documents. Some of the information within
Grants Online is sensitive in nature and is not
releasable to the general public. Since the system
must sit outside the NOAA firewall in order to
allow access by recipients, reviewers, and the
general public, we have taken several precautions
to ensure proper system security. However, Grants
Online can only be secure if the personnel who
use it treat security seriously. The information
presented below is intended to make you more
aware of your responsibilities as an authorized
user of Grants Online. |
|
| Levels of Security |
|
• |
Role
Based - Users may only perform functions within
their assigned role(s), e.g. A Budget Officer
may edit and approve or reject a procurment request,
and may view the related application package
documents, but may not do much else. |
|
• |
Scope Based - Program
Office personnel are limited to viewing applicaitons
submitted to their own Program Office, and to
applicatoins from other Program Offices only
if specifically authorized. |
|
• |
Document Based -
Original application documents are always locked.
Documents sent through workflow are locked and
remain locked if approved. Signed award actions
cannot be unlocked. |
|
| Passwords |
• |
Must be a minumum
of 8 characters, starting with an alphabetic
character and containing at least 2 non-alphabetic
characters. |
• |
Must be changed every
90 days. |
• |
Do NOT share your
password with anyone! |
|
• |
Do NOT
allow anyone to share their password with you. |
|
| User Responsibility |
• |
Users are responsible
for their actions. Carelessness, such as leaving
the work area unattended while logged on to Grants
Online can lead to the unauthorized disclosure
of information. |
• |
Report security
breaches to the Grants Online PMO staff or help
desk. |
• |
As always, you
may be held civilly or criminally liable for
information you divulge that harms an applicant,
recipient, or reviewer. |
|
