Financial Web Service Access Agreement Instructions: This form will be used to record signatures for authorization to use the Financial Web Service. If you have any questions about the need for this access, please contact the person who forwarded you this form. For general information, contact Mary J. Mackay in the Office of Financial Management at mjmackay@uw.edu. Please read the statements appearing on all pages of this form. Recognize that the user has agreed to them by forwarding this request to you, and follow the forwarding instructions that pertain below. When finished, please sign and forward form to Office of Financial Management, Box 351248,FAX: 206685-7690 Except in unusual cases, forms with fewer than three signatures will be rejected. College/Departmental procedures may require more rigorous approvals. Forward a copy of this request to others that you feel should be aware that this access exists. Signatures Required for Access: I certify that I, the requesting user, will abide by all the rules set forth in this agreement. I recognize that although financial information is generally open to all members of the UW community who need financial information to perform their job duties, I will not share this data with anyone else who does not explicitly need it to perform their job duties and furthermore the computer systems for which I am responsible will not share this information with anyone who is not appropriately authorized to access UW financial information. Administrative Contact (please print) UWnetID Phone Signature Phone Signature Email Technical Contact(s) (please print - attach additional pages as needed) UWnetID Financial Management Use Only (sign to approve account) Dean/Director/Chair (please print) UWnetID University of Washington Financial Data Management Office of Financial Management finmgmt@u.washington.edu – http://f2.washington.edu/fm/home 206-543-4990 – FAX 206-685-7690 Signature Document1 – page 1 of 2 rev: November 24, 2009 University of Washington -- Office of Financial Management AUTHORIZATION FOR ACCESS TO FINANCIAL RECORDS (FWS) Financial Web Service (hereafter “FWS”) contains University financial information which is open to anyone who has been authorized to use it. University data management policy allows unrestricted access to financial information for the purpose of doing one’s job. You are being granted access to FWS on behalf of your unit for the purpose of developing computer applications and services that are primarily for your unit, but that may also be leveraged by the University at large. Because your application will potentially have access to institutional wide financial information, you must agree to use and share only that information that is relevant to your work or to the work of those who are authorized to use your computer applications and services. Although most financial records do not contain personally identifiable information, some transaction records do. Every effort has been made to modify practice such that contemporary financial transactions are not at risk. Nevertheless, some financial transactions may indicate the names of employees, patients or students in the description fields of such records. Student education records must be safeguarded according to the Family Educational Rights and Privacy Act (FERPA). Please refer any questions regarding FERPA to the Assistant Registrar for Records in the Office of the Registrar at 206-543-3290 or email ferpa@u.washington.edu. More information on FERPA can be found at http://www.washington.edu/students/reg/ferpa.html. Similarly, patient records must be safeguarded according to the HIPAA rules for health information privacy. More information on HIPAA can be found at http://www.hhs.gov/ocr/privacy/hipaa/understanding/summary/index.html. Finally, UW student loan records must be safeguarded according to the provisions set forth in the Gramm-Leach-Bliley (GLBA) Act. More information on GLBA can be found at: http://www.ftc.gov/privacy/glbact/glbsub1.htm. You must agree to comply with these federal regulations and guidelines and to ensure that the computer applications and services which use FWS and for which you are responsible do as well. Computers or networks storing extracted financial data or accessing Web services that use financial data must be protected with the same safeguards as the primary financial databases, and only authorized University employees with a "need-to-know" may have access to these records. Furthermore, by signing this form, you are agreeing to perform regular, periodic reviews of your systems to remain compliant with the System Security Certification (below). Please attach brief answers to the following questions (1) There are a variety of information resources available on campus, some of which might better match your needs than using FWS. Therefore, please describe the kinds of applications and services you hope to develop, and/or the kinds of needs you seek to fulfill by using FWS. (2) Please outline how you will educate users on information security, law (FERPA, HIPAA, GLBA), and UW policy regarding financial records, and how your systems will handle financial transactions which may contain personally identifiable information. (3) Please complete and attach the system security certification available at https://wiki.cac.washington.edu/display/AIS/System+Security+Certification, noting those areas where you do not currently meet the standards. (4) Please provide us with the following network details and technology contacts (if you have multiple certificates, provide them as an attachment): Production Application Cert Name (DNS format) IP address and host name of servers hosting application Development Application Cert Name (DNS format) IP address and host name of servers hosting application I certify that the above statements are correct to the best of my knowledge. I further understand the terms described above and have agreed to these conditions. _____________________________ Requesting user printed name ___________________________ Signature _______________ Date _____________________________ Domain Admin printed name ___________________________ Signature _______________ Date University of Washington Financial Data Management Office of Financial Management finmgmt@u.washington.edu – http://f2.washington.edu/fm/home 206-543-4990 – FAX 206-685-7690 Document1 – page 2 of 2 rev: November 24, 2009