County Security Administrators, System Administrators, and Authorized Provisioning Leads, CARES SPOCs, Implementation Coordinators, County Leadership, Tribe Leadership, and State Leadership:
Following up on the August 31st communication regarding generic test accounts within the CWS- CARES Prod Sim (CARES 100) environment, the CWS-CARES Project is providing specific instructions on how County Security Administrators, System Administrators, and Authorized Provisioning Leads can revoke access for any remaining generic test accounts.
Required Actions for County Administrators
- Immediately audit your system users and identify any generic, shared, or placeholder test accounts within CARES100 (Prod Sim).
- Revoke the user access by following the step-by-step procedures Instructions for Revoking Generic Test Accounts in CWS-CARES as posted on the CWS-CARES System Updates & Release Notes | Child Welfare Digital Services page.
- If you encounter technical issues and are unable to revoke a generic test account in Prod Sim (CARES100), please submit a ticket through the standard Tier 2 Help Desk so the project team can assist you directly.10
Thank you for your prompt attention to ensuring our security standards and audit compliance standards are maintained. Please reach out during the Production Simulation Office Hours if you have any questions regarding proper provisioning workflows.
If you have questions, please contact the CWDS Information Security mailbox.
Action Required
Please share this communication with all staff who should be aware of these details. County Administrators are requested to immediately audit CARES 100 (Prod Sim) for generic test accounts and revoke their access using the provided guide or submit a Tier 2 Help Desk ticket if technical issues arise.
_________________________________________________________________
Security Protocols for Prod Sim Case Data
The Prod Sim environment contains converted CWS/CMS cases reflecting actual system data as of April 17, 2026. Because this includes real, sensitive Personally Identifiable Information (PII), all case information must be strictly protected or redacted.
To protect CWS-CARES case data, please follow these important security guidelines when working with our support teams:
- Redact Ticket Info: Do not send Protected Health Information (PHI), PII, or confidential case details to the Service Desk via email or ticket. Sensitive and confidential data cannot be stored in the ticketing system.
- Secure Screen Shares: During support-requested screen shares, limit attendees to essential personnel only. Recording of sensitive information is strictly prohibited.
- Consult for Tier 3 Transfers: If Tier 3 support needs sensitive data, use secure transmission methods. Contact your county Privacy Officer or the CWDS ISO if you need assistance with secure routing.
We appreciate your dedication to protecting the safety and privacy of vulnerable children and families while we work together to support your needs.