Pay.gov - Rules of Behavior

Find Public Forms

by Form Name by Agency Name

Search Public Forms

Public Resources

Resources

Accessibility Statement Notices & Agreements Privacy & Security Policy Public Reports Sitemap

Help

Information

Agency Information Overview Implementing Documentation Press / Articles

                                 PAY.GOV USER RESPONSIBILITY STATEMENT

USER NAME AND PASSWORD:
When an agency-enrolled user account is created in Pay.gov, the application will email the user a user name to be used when logging in to the Pay.gov application; the user must contact Pay.gov Customer Service to obtain their initial password. A self-enrolled user is provided with a user name as part of the self-enrollment process and will create their own password. The password, which is under the user's sole control, provides protection for the user and Pay.gov. The agency-enrolled user is immediately required to change the password after initially logging on to the system. The pattern of the User Name may be known by others and the User Name is displayed on the screen when entered, but the password is not displayed and not known by anyone other than the user.

INACTIVE USERS:
After ninety (90) days of non-use, agency-enrolled user accounts may be subject to deactivation.  If an account is deactivated, the user will need to contact their Agency Security Contact and request that the account be reactivated.

LOCKED ACCOUNTS:
If at any time during the login process a user account becomes locked, the account will remain locked for fifteen (15) minutes.  The account will then unlock and the system will allow the user additional attempts to logon with the correct password before re-locking the account.  If a user does not know or cannot remember their password, they should reset their password by selecting the "Trouble Logging In?" link on the Pay.gov home page.

If an agency-enrolled user requires assistance with the login process or needs their password reset, they should contact Pay.gov Customer Service at 1-800-624-1373.

If a self-enrolled user does not remember their password and is unable to answer the secret question in order to reset their password, the user must create a new user account.

USER RESPONSIBILITIES:
Once assigned a User Name and password, the user agrees to be responsible for the consequences that result from the disclosure or use of the password. To avoid compromising the password, the user agrees that they will:
* Not make the password known to anyone or put it in written form unsecured;
* Prevent others from watching password entry;
* Prevent others from guessing the password by not using the names of persons, places, or things that are identified with the user as part of the password; and
* Log off of the system whenever the user's computer is unattended.

Agency-enrolled user account passwords expire after ninety (90) calendar days and the system will automatically prompt the user to reset their password. If a user feels that their password has been compromised, they must change it immediately. In addition, the user must report unauthorized use to Pay.gov Customer Support at 1-800-624-1373.

SECRET QUESTION AND ANSWER:
The Pay.gov application allows users to reset their own password using a Secret Question/Secret Answer, which is established during the initial login.  The secret answer must be protected in the same manner as a user protects their password.  The Secret Question and Secret Answer should be easy for a user to remember but difficult for others to guess.

                          U.S. Treasury Department - Financial Management Services
                                   Pay.gov System IT Security
                                      RULES OF BEHAVIOR

Please read the following User Rules of Behavior.

USER RULES OF BEHAVIOR
Users must ensure that the information technology (IT) resources with which they have been entrusted are used properly, as directed by FMS policies and standards, taking care that the laws, regulations, and policies governing the use of such resources are followed and that the value of all information assets are preserved. Each user is responsible for all activities associated with their assigned User ID.
Users must follow approved Pay.gov procedures to request or to revoke access to the Pay.gov system. Users must contact their agency designated Pay.gov security contact to complete and submit the appropriate access change request forms. Users must take positive steps to protect FMS equipment and, systems, software, and data from loss, theft, damage, and unauthorized use or disclosure. Users must report improper or suspicious use of FMS equipment and systems to the Pay.gov Customer Support (1-800-624-1373). 
Users must ensure that unauthorized individuals cannot view screen contents. 
Users must protect User IDs and passwords from improper disclosure. Passwords provide access to FMS federal agency data and resources. Users are responsible for any access made under his/her User ID and password. 
Users:
- Do not reveal passwords or Secret Answers under any circumstances. Disclosure is considered a security violation and is to be reported as such. 
- Do not share passwords with anyone else or use another person's password.
- Do not write passwords or Secret Answers down, unless secured.
- Agency Enrolled Users must change passwords at least every 90 days.
- Must choose hard to guess passwords, using a minimum of eight characters including one upper case letter, one lower case letter and one numeric. Passwords may include special characters. Example: Pass$wrd1.
- Must choose hard to guess Secret Answers,

Users must not attempt to circumvent any Pay.gov system security control mechanisms. 
Users must follow proper logon/logoff procedures. User is aware that his/her assigned User ID and password serve as his/her electronic signature, therefore, accepting responsibility, for all activity while active in the Pay.gov system.
Users must utilize anti-virus protection mechanism(s) on any systems connecting to FMS applications.
Users must complete and document IT security awareness, training and education as required by applicable government directives.
Users must report any known or suspected breaches of Pay.gov system security to the FRB Customer Support immediately after discovery of the occurrence. 

ACCEPTANCE
I have read the Pay.gov User Responsibility Statement, agree to its terms, and understand my responsibilities for the use and protection of my logon ID and password. Further, I understand the consequences that may result from disclosure or inappropriate use. If I fail to adhere to any of the terms in this statement, the Pay.gov Agent (Federal Reserve Bank of Cleveland Information Security) may revoke my logon ID and take other appropriate action.

AND
I have read the Financial Management Service (FMS) IT Security Rules of Behavior for the Pay.gov system and fully understand the security requirements of the information systems, applications and data. I further understand that violation of these rules may be grounds for revocation of my User ID and may result in actions up to and including prosecution under federal law.

Acceptance of the Pay.gov System IT Security RULES OF BEHAVIOR will be captured and stored through an automated process when logging in to the Pay.gov application.

View and Print 'Rules of Behavior' in separate window.

I have read the Financial Management Services Pay.gov System IT Security Rules of Behavior and fully understand the security requirements of the information systems, applications, and data. I further understand that violation of these rules may be grounds for administrative and/or disciplinary action by FMS and may result in actions up to and including termination or prosecution under federal law.

I accept the Pay.gov Rules of Behavior
I decline the Pay.gov Rules of Behavior


		Home > Self Enrollment