WA ST Patrol WSP 3/8/2021 - Laserfiche WebLink

WACIC and NCIC. IX. Security Responsibilities Technical Roles and Responsibilities All agencies participating in ACCESS must comply with and enforce system security. Each interface agency(city, county, or other agency) having access to a criminal justice network must have someone designated as the technical security POC. A criminal justice network is a telecommunications infrastructure dedicated to the use by criminal justice entities exchanging criminal justice information. The technical security POCs shall be responsible for the following: 1. Identifying the user of the hardware/software and ensuring that no unauthorized users have access to the same. 2. Identifying and documenting how the equipment is connected to the state system. 3. Ensuring that personnel security screening procedures are being followed as stated in the CJIS Security Policy. 4. Ensuring that appropriate hardware security measures are in place. 5. Supporting policy compliance and keeping the WSP Information Security Officer (ISO) informed of security incidents. Security Enforcement Each interface agency is responsible for enforcing system security standards for their agency, in addition to all of the other agencies and entities to which the interface agency provides CJIS and Washington State Department of Licensing (DOL) records information. Authorized users shall access CJIS and DOL systems and disseminate the data only for the purpose for which they are authorized. Each criminal justice and non-criminal justice agency authorized to access FBI CJIS systems and DOL shall have a written policy for the discipline of policy violators. Physical Security A physically secure location is a facility, a criminal justice conveyance, or an area, a room, or a group of rooms within a facility with both the physical and personnel security controls sufficient to protect CJI and associated information systems. The physically secure location is subject to criminal justice agency management control. The perimeter of a physically secure location shall be prominently posted and separated from non-secure locations by physical controls. All personnel with access to computer centers, terminal areas, and/or areas where unencrypted CJIS information is housed shall either be escorted by authorized personnel at all times or receive a fingerprint-based background check and view security awareness training prior to being granted access to the area. Personnel Security To verify identification, a state of residency and national fingerprint-based record checks shall be conducted prior to employment or assignment for all personnel who have authorized access to FBI CJIS systems and those who have direct responsibility to configure and maintain computer systems and networks with access to FBI CJIS systems. All requests for system access shall be made as specified by the CSO. The CSO or their 2021 WSP ACCESS User Acknowledgment 5