<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Good Evening CITL Members,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Summary:<o:p></o:p></p>
<p class="MsoNormal">There is a change to DUO that ITS will be making on November 6 around 10PM there is No expected change to user experience. There are only a few applications outside of ITS that use DUO and if you are one of the units that have such an
application and want to test the app before the move please contact the IAM team at:
<a href="mailto:itsiam@ucr.edu" target="_blank">itsiam@ucr.edu</a><br>
<br>
<o:p></o:p></p>
<p class="MsoNormal">Details:<o:p></o:p></p>
<p class="MsoNormal">DUO will be forcing a change to the service by activating the Policy and Control Engine globally beginning November 12. ITS is choosing to make the switch on a scheduled time that works for all teams that are involved. Moreover by doing
this change on a Friday night vs a Thursday night if there is an issue we need to address then there is less of an impact and a larger window to fix it.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Risk is deemed low by DUO per DUO's notification which indicates: "The upgrade process is designed to automatically migrate your existing individual application and group settings to new policy objects without any impact to your end-users.
There will be no service interruptions during the migration. The migration may take a few seconds to complete." Risk is also deemed low by ITS teams. IAM (has been in the DUO sandbox since June, test since July tested in CAS, CWS tested with MyAccount DUO
integration, Network team tested with VPN, ISO tested with administrative script. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Although the risk is low if something does go wrong the impact is considered to be high, due to the fact that DUO is used to access a wide range of systems by users. Also this change has no back out path, once the change is made we must
move forward. We have engaged Duo to see about getting standby support, but at this moment it looks as if our only option is to engage them if something goes wrong, at which time they will get back to us with in a 4 hour window. We will continue to see if
it is possible to have standby support. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">If your unit is using DUO to MFA to an application you managed and would like to test the new process, or if you have any other questions about this change please contact the IAM team at:
<a href="mailto:itsiam@ucr.edu" target="_blank">itsiam@ucr.edu</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:#003F6C">Dewight Fredrick Kramer</span></b><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#484848">Chief Information Security Officer </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#484848">Information Technology Solutions</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#484848">University of California, Riverside </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:Wingdings;color:#484848">(</span></b><b><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#484848"> </span></b><span style="color:#484848">(951) 827-3070| </span><b><span style="font-size:9.0pt;font-family:Wingdings;color:#484848">*</span></b><span style="color:#484848"> </span><span style="color:#112848"><a href="mailto:dewight.kramer@ucr.edu"><span style="color:#044A91">dewight.kramer@ucr.edu</span></a></span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><img border="0" width="157" height="48" style="width:1.6354in;height:.5in" id="Picture_x0020_1" src="cid:image001.png@01D6B2D1.52F204F0" alt="signature_2034439392"><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>