18 KSU work with vendor to enable security auditing on the Banner Oracle database Concur Ongoing CIO Summer 2023
19 Remove Purchasing Director's ability to approve or alter his or her own approvals within Banner; IT should be responsible for all changes made to the approval queue within Banner Concur Ongoing CFO Summer 2023
20 Configure Network and Banner to require passwords to be changed prior to first use (default passwords) Concur Ongoing CIO Summer 2023
Continue performing quarterly audits of Banner and ADP; adequate documentation should be obtained from each of the Banner module managers to ensure reviews are being performed for each module Concur Ongoing CIO Summer 2023
Management should regularly monitor changes to user access, and reports on this monitoring should be included in the quarterly audits Concur TBD CIO Summer 2023
Implement procedures to monitor the Banner approval queue regularly to ensure only properly authorized users and approvals are configured Concur Completed CIO Summer 2023
Begin using effective and termination dates when altering approvals within Banner Concur Completed CIO Summer 2023
Network, Banner, and ADP should require passwords to be changed at least every 60 days for all privileged accounts and every 90 days for all non-privileged accounts NonConcur Ongoing CIO Summer 2023
Banner passwords should require both alphanumeric and special characters; password history for both Banner and ADP should be increased to 24 passwords NonConcur Ongoing CIO Summer 2023