Washington State Patrol WSP 11/3/2016

conduct a short audit of the agency to verify compliance standards are being met. See ACCESS Operations Manual Introduction for more information. III. Indemnification Each agency(party) shall defend, protect, and hold harmless the other agency(party)from and against all claims, suits and/or actions arising from any neglig lent or intentional act or omission of that party's employees, agents, and/or authorized subcontractor(s)while performing under this agreement. IV. Administrative Responsibilities The agency shall respond to requests for information by the FBI CJIS Division or ACCESS in the form of questionnaires, surveys, or similar methods, to the maximum extent possible, consistent with any fiscal, time, or personnel constraints of that agency. All agencies are required to have formalized written procedures for the following, if applicable: validations, hit confirmation, criminal history use and dissemination, ACCESS misuse, record entry(for all record types entered into WACIC and NCIC), rebackground investigations, password management, disposal of media, physical protection and documenting, updating the system network. The CSO provides system training to agencies accessing WACIC/NCIC through the state computer system. If employees are using inquiry only functions, they must attend Level 1 certification training. Employees entering information into the WACIC/NCIC system must attend Level 2 certification training. All certifications must be aquired within six months of hire date and renewed biennially. All staff who manage ACCESS users and are not ACCESS certified must view the Upper Management and Administrators Overview Training online and sign the signature log, which must be kept at the agency for review during the triennial ACCESS audit. Security awareness training is required within six months of initial assignment, and biennially thereafter, for all personnel (who are not ACCESS certified) that have unescorted access to CJI. This includes agency employees, custodial staff, IT staff, upper management, etc. Records of individual basic security awareness training shall be documented, kept current, and maintained by each agency for review during the triennial ACCESS or Technical Security audit. A Terminal Agency Coordinator(TAC) must be assigned for each terminal agency. This person is the Point Of Contact(POC)for the agency. A TAC must maintain a Level 2 ACCESS certification. The TAC retains the responsibility of ensuring his/her agency is in compliance with state and FBI CJIS Division policies and regulations. A TAC must attend TAC training once during the triennial audit cycle. For those agencies providing ACCESS services through regional computer systems to outside agencies, the TAC shall be responsible for the dissemination of all administrative messages received on the 24 hour printer to those agencies. The CSO provides the criminal justice community with the current ACCESS Operations Manual, NCIC Operating Manual, NCIC Code Manual, and CJIS Security Policy. Manual updates are provided on a quarterly basis. The agency shall incorporate such changes upon receipt. Information is provided via email and can be found on the ACCESS website at the following link: 2014 ACCESS User Acknowledgement 7-23-2015 2