Technical requirements - Information Technology Services

●
and directory structures.
Use Case (example): Bus Ofc
POC can set one­time
permissions to bus ofc data
and directory structures when
permission process fails or an
exception request is
necessary.
2
e
What do we capture in the audit logs
(system, app, database, etc.) And,
who has access to review and/or
interrogate the audit logs, at what
frequency
● Use Case (example): Audit
logs capture new account,
account change, account
revocation, successful login
attempts, failed login
attempts, login attempts
source/destination, etc.
● Use Case (example): Service
Provider interrogates audit
logs and submits report to
data stewards, on a quarterly
basis
3 User Communities
3
a
Within UCSC and/or UC, who can
use the system and what roles do
they have
● Use Case (example):
Students have "student" role
(crud and rwxd only their own
records).
● Use Case (example): Bus Ofc
POC has "officer" role (crud
and rwxd to their bus ofc
group of records).
● Use Case (example): Bus Ofc
admin has "admin" role
(configures business rules,