Security Policy and the Cloud

Does CJIS policy demand that members of the prosecutor's office be signed into a police department building if they are going to access areas of the b

The solicitor’s office personnel can discuss an upcoming trial physically wherever they feel comfortable whether there is a CJI terminal in the room or not.

Is case and incident information I exchange by voice over my ePTT system (Kodiak) subject to CJIS requirements for encryption and authentication?

The short answer is “No”. Case and incident information would be generated by the police agency responding to the call and most of the time this is transmitted over the radio dispatch which is accessible to the public via scanners or Web streaming.

Should cities place the person responsible for CJIS compliance or cyber security of systems in the city under the direction of the police department?

Section 3 of the FBI-CJIS Security Policy defines Roles and Responsibilities for an agency. With regard to this specific question, the answer is that the responsibility for this can be in either department.

What are the biggest challenges in small rural communities for law enforcement?

With regard to security compliance the biggest challenges would be staffing and funding.

What is the certification process for vendors?

In short, there isn’t one. I wrote a whitepaper recently covering this topic, among other items. There is no central FBI-CJIS authorization body, no accredited pool of independent assessors, nor a standardized assessment...

To what types of data does the FBI-CJIS Security Policy apply? Does this differ for hosted solutions?

Any data that is considered criminal justice information, or CJI. In many cases this is very clear and well-defined such as data contained in a records management system or a facial recognition gallery made up of mugshots...

What is the FBI-CJIS Security Policy?

The Federal Bureau of Investigation (FBI) created the FBI-Criminal Justice Information Services Division Security Policy (FBI-CJIS Security Policy) to provide authorized agencies with a security management structure for accessing, protecting and safeguarding...

Page 1 of 1