Guidance for Defense Agencies Initiative (DAI) Information Owner (IO) Appointment and Validation of Active Information Owners

1.  This message is a collaborative effort between
Deputy Commandants (DC) for Programs & Resources (P&R) and
Installations & Logistics (I&L) addressing the role of the IOs in the
proper execution of CUECs 1, 2, 3, 9, hereby referred to as access
management controls. IOs are command-appointed individuals 
responsible for managing system access. The Marine Corps must appoint
and train IOs at every level to effectively implement access
management controls in accordance with reference (a) and resolve the
Financial Information Systems Access Controls/Segregation of Duties
material weakness identified in reference (b). 
2.  Effectively immediately, all CGs, DCs, Commanders, and Directors
at levels 1-4 in DAI must appoint sufficient IOs to: 
2.a.  CUEC 1: Ensure users complete annual cyber security awareness
training and upload the training certificate in the Access Request 
Management System (ARMS). 
2.b.  CUEC 2: Ensure users complete all access provisioning
requirements and that DAI access is terminated timely.
2.c.  CUEC 3: Perform an annual DAI User Access Review (UAR).
2.d.  CUEC 9: Resolve all identified segregation of duties (SOD)
conflicts monthly.
3.  Commands must identify a minimum of two IOs for each of these
functional areas: Financial Management (FM), All Other Government,
and Oracle Time and Labor (OTL). Some commands will need to appoint
more than two IOs in each of these functional areas due to their high
number of DAI users. Likewise, commands may nominate the same
individual to be the IO for multiple functional areas with HQMC
approval. 
4.  The typical IO distribution follows this structure: FM IOs reside
within the Comptroller Section. All Other Government IOs reside
within the Supply Section.  All Other Government includes all 
personnel within the command involved in requisition operations.
Commands have the discretion to appoint OTL IOs in either the 
Personnel/Manpower Section or Comptroller Section, depending on where
payroll operations reside.
5.  IO Appointment Process
5.a.  Users must obtain and complete the IO Appointment Letter Memo
template located at 
https:(slash)(slash)tso-confluence.mcw.usmc.mil/display/dkb/
dai+arms+access+request
5.b.  The appointment letter must be signed by CGs, DCs, Commanders,
Directors, or other designated officials authorized to sign by
direction.
5.c.  Users must upload the signed appointment letter and submit a
new IO System Authorization Access Request (SAAR) in ARMS.
5.d.  The P&R User Management (UMX) Section will review the required
documentation and approve the IO SAARs appropriately. 
6.  L2 Commands must validate level 2-4 IOs with the P&R Systems and
Data Integration (SDI) Division and the I&L Logistics Compliance
Branch (LPC) every quarter to ensure that the organization can
support DAI access management controls. 
7.  The minimum number of IOs is a requirement eligible for
inspections.
8.  Assistance for IOs requesting responsibilities in DAI can be
located at  https:(slash)(slash)tso-confluence.mcw.usmc.mil/display
+dkb/dai+arms+access+request.  Choose the following files: Step-by-
step instructions for USMC DAI ARMS IO Access Request Guide.
9.  The SDI Division and LPC Branch will coordinate training for IOs
using the Microsoft Teams platform.  A training schedule will be sent
via SEPCOR.  For specific questions, contact the following POCs:
9.1.  FM: Mr. Robert Burnand and Ms. Shajuana Nicholson.
9.2.  All Other Government: Ms. Sheila Warren.
9.3.  OTL: Ms. Jessica Lynard-Kongkiat and Ms. Cheryl Dabrio.
10.  This MARADMIN is applicable to the Marine Corps Total Force.
11.  Release authorized by Anna N. K. Smith, Assistant Deputy
Commandant for Programs and Resources (R), and BGen F. C. Poole, III,
Assistant Deputy Commandant for Installations and Logistics (LP).