Laserfiche WebLink
2023 WSP ACCESS User Acknowledgement Page 6 of 14 <br />reviews: <br />1. Agency Compliance Review: WSP Auditors conduct an administrative interview with the TAC. The <br />interview includes questions to determine adherence to WACIC/NCIC policy requirements including: <br />a. System Administration <br />b. System Integrity <br />c. Hit Confirmation <br />d. Record Integrity <br />e. Criminal History <br />f. NICS <br />g. N-DEx <br />h. Written Procedures <br />i. Validations <br />2. Data Quality Review: WSP Auditors conduct an on-site data quality review. Auditors compare <br />WACIC/NCIC records against agency case files. Auditors check for accuracy, completeness, and verify <br />entry and removal practices. The auditors document records with errors for the agency to update. <br />3. Auditor Recommendations for Best Practices: WSP Auditors provide a compliance report of <br />information received during the interview and data quality review. They provide recommendations for best <br />business practices. <br />XI. Technical Security Audits <br />The agency is responsible for compliance to technical standards set forth by ACCESS and the CJIS Security <br />Policy. Technical Security Audits will follow the WACIC/NCIC triennial audit schedule. <br />1. Agency Compliance Review: The WSP performs security audits addressing the <br />following compliance areas: <br />a. Personnel security <br />b. CJIS data breach reporting <br />c. Configuration management <br />d. Media protection (physical and electronic) <br />e. Physical protection <br />f. Session lock <br />g. System and communications protection and information integrity <br />h. Boundary protection <br />i. Malicious code protection <br />j. Event logging <br />k. System use notification <br />l. Patch management <br />m. Identification and authentication <br />n. Wireless devices – mobile / bluetooth / cellular <br />o. Handheld mobile devices