Ask The Expert: Page 2

Should I immediately make an arrest when I get a match?

Vigilant Solutions

No. All facial recognition matches are considered possible and arrests should not be made based solely off of facial recognition software results.

Is there a such thing as "better mugshots?"

Vigilant Solutions

In most cases, mugshots are a great image source for facial recognition.

Does CJIS policy demand that members of the prosecutor's office be signed into a police department building if they are going to access areas of the b

The solicitor’s office personnel can discuss an upcoming trial physically wherever they feel comfortable whether there is a CJI terminal in the room or not.

Is case and incident information I exchange by voice over my ePTT system (Kodiak) subject to CJIS requirements for encryption and authentication?

Vigilant Solutions

The short answer is “No”. Case and incident information would be generated by the police agency responding to the call and most of the time this is transmitted over the radio dispatch which is accessible to the public via scanners or Web streaming.

Should cities place the person responsible for CJIS compliance or cyber security of systems in the city under the direction of the police department?

Vigilant Solutions

Section 3 of the FBI-CJIS Security Policy defines Roles and Responsibilities for an agency. With regard to this specific question, the answer is that the responsibility for this can be in either department.

What are the biggest challenges in small rural communities for law enforcement?

Vigilant Solutions

With regard to security compliance the biggest challenges would be staffing and funding.

What is the certification process for vendors?

Vigilant Solutions

In short, there isn’t one. I wrote a whitepaper recently covering this topic, among other items. There is no central FBI-CJIS authorization body, no accredited pool of independent assessors, nor a standardized assessment...

To what types of data does the FBI-CJIS Security Policy apply? Does this differ for hosted solutions?

Vigilant Solutions

Any data that is considered criminal justice information, or CJI. In many cases this is very clear and well-defined such as data contained in a records management system or a facial recognition gallery made up of mugshots...

What is the FBI-CJIS Security Policy?

Vigilant Solutions

The Federal Bureau of Investigation (FBI) created the FBI-Criminal Justice Information Services Division Security Policy (FBI-CJIS Security Policy) to provide authorized agencies with a security management structure for accessing, protecting and safeguarding...

Page 2 of 2