R 261740Z FEB 25 MARADMIN 091/25 MSGID/GENADMIN/CMC WASHINGTON DC PR & DC IL// SUBJ/GUIDANCE FOR DEFENSE AGENCIES INITIATIVE (DAI) INFORMATION OWNER (IO) APPOINTMENT AND VALIDATION OF ACTIVE INFORMATION OWNERS// REF/A/INTERIM GUIDANCE FOR THE PERFORMANCE OF DAI COMPLEMENTARY USER ENTITY CONTROLS (CUEC) DATED FEB 2023// REF/B/FISCAL YEAR 2023 AGENCY FINANCIAL REPORT// NARR/REF A PROVIDES INTERIM GUIDANCE AND DEFINES DAI CUECS.  REF B DOCUMENTS THE RESULTS OF THE MARINE CORPS TWO-YEAR AUDIT.// POC/J. A. GARZA/COL/UNIT: DC PR WASHINGTON DC/TEL: 703-614-2240/ E-MAIL: [email protected]// POC/F. L. MCCLINTICK/COL/UNIT: DC IL WASHINGTON DC/TEL: 571-256-2741/ E-MAIL: [email protected] // POC/S. L. NICHOLSON/CIV/UNIT: DC PR SDI WASHINGTON DC/ TEL: 703-784-6957/ E-MAIL: [email protected]// POC/S. WARREN/CIV/UNIT: DC I&L WASHINGTON DC/ TEL: 571-256-7183/ E-MAIL: [email protected]// POC/R. L. BURNAND/CIV/UNIT: DC PR SDI INDIANAPOLIS IN/ TEL: 317-200-3534/ E-MAIL: [email protected]// POC/J. LYNARD-KONGKIAT/CIV/UNIT: DC PR SDI WASHINGTON DC/ TEL: 843-991-4012/ E-MAIL: [email protected]// POC/C. A. DABRIO/CIV/UNIT: DC PR SDI WASHINGTON DC/TEL: 571-733-7737/ E-MAIL: [email protected]// GENTEXT/REMARKS/1.  This message is a collaborative effort between Deputy Commandants (DC) for Programs & Resources (P&R) and Installations & Logistics (I&L) addressing the role of the IOs in the proper execution of CUECs 1, 2, 3, 9, hereby referred to as access management controls. IOs are command-appointed individuals  responsible for managing system access. The Marine Corps must appoint and train IOs at every level to effectively implement access management controls in accordance with reference (a) and resolve the Financial Information Systems Access Controls/Segregation of Duties material weakness identified in reference (b).  2.  Effectively immediately, all CGs, DCs, Commanders, and Directors at levels 1-4 in DAI must appoint sufficient IOs to:  2.a.  CUEC 1: Ensure users complete annual cyber security awareness training and upload the training certificate in the Access Request  Management System (ARMS).  2.b.  CUEC 2: Ensure users complete all access provisioning requirements and that DAI access is terminated timely. 2.c.  CUEC 3: Perform an annual DAI User Access Review (UAR). 2.d.  CUEC 9: Resolve all identified segregation of duties (SOD) conflicts monthly. 3.  Commands must identify a minimum of two IOs for each of these functional areas: Financial Management (FM), All Other Government, and Oracle Time and Labor (OTL). Some commands will need to appoint more than two IOs in each of these functional areas due to their high number of DAI users. Likewise, commands may nominate the same individual to be the IO for multiple functional areas with HQMC approval.  4.  The typical IO distribution follows this structure: FM IOs reside within the Comptroller Section. All Other Government IOs reside within the Supply Section.  All Other Government includes all  personnel within the command involved in requisition operations. Commands have the discretion to appoint OTL IOs in either the  Personnel/Manpower Section or Comptroller Section, depending on where payroll operations reside. 5.  IO Appointment Process 5.a.  Users must obtain and complete the IO Appointment Letter Memo template located at  https:(slash)(slash)tso-confluence.mcw.usmc.mil/display/dkb/ dai+arms+access+request 5.b.  The appointment letter must be signed by CGs, DCs, Commanders, Directors, or other designated officials authorized to sign by direction. 5.c.  Users must upload the signed appointment letter and submit a new IO System Authorization Access Request (SAAR) in ARMS. 5.d.  The P&R User Management (UMX) Section will review the required documentation and approve the IO SAARs appropriately.  6.  L2 Commands must validate level 2-4 IOs with the P&R Systems and Data Integration (SDI) Division and the I&L Logistics Compliance Branch (LPC) every quarter to ensure that the organization can support DAI access management controls.  7.  The minimum number of IOs is a requirement eligible for inspections. 8.  Assistance for IOs requesting responsibilities in DAI can be located at  https:(slash)(slash)tso-confluence.mcw.usmc.mil/display /dkb/dai+arms+access+request.  Choose the following files: Step-by- step instructions for USMC DAI ARMS IO Access Request Guide. 9.  The SDI Division and LPC Branch will coordinate training for IOs using the Microsoft Teams platform.  A training schedule will be sent via SEPCOR.  For specific questions, contact the following POCs: 9.1.  FM: Mr. Robert Burnand and Ms. Shajuana Nicholson. 9.2.  All Other Government: Ms. Sheila Warren. 9.3.  OTL: Ms. Jessica Lynard-Kongkiat and Ms. Cheryl Dabrio. 10.  This MARADMIN is applicable to the Marine Corps Total Force. 11.  Release authorized by Anna N. K. Smith, Assistant Deputy Commandant for Programs and Resources (R), and BGen F. C. Poole, III, Assistant Deputy Commandant for Installations and Logistics (LP).//