Washington State Patrol 1/16/2019

Attachment D Management Control Agreement Management Control Agreement Must be completed by agencies who: A. Have a city or county Information Technology (IT) department handling IT services for the criminal justice agency. B. Utilize a 911 center for criminal justice agencies. Pursuant to the CJIS Security Policy, it is agreed that with respect to administration of that portion of computer systems and network infrastructure interfacing directly or indirectly with A Central Computerized Enforcement Service System (ACCESS) for the interstate exchange of criminal history/criminal justice information, the Criminal Justice Agency shall have the authority, via managed control, to set and enforce: (1) Priorities. (2) Standards for the selection, supervision, and elimination of access to criminal history/criminal justice information by personnel who may be tasked with working on or interfacing with any of the telecommunication systems or criminal justice r below. enumerated in paragraph three ee be ow. (3) Policy governing operation of justice systems, computers, access devices, circuits, hubs, routers, firewalls, and any other components, including encryption, that comprise and support a telecommunications network and related criminal justice systems to include but not limited to criminal history record/criminal justice information, insofar as the equipment is used to process or transmit criminal justice systems information guaranteeing the priority, integrity, and availability of service needed by the criminal justice community. (4) Restriction of unauthorized personnel from access or use of equipment accessing the State network. (5) Compliance with all rules and regulations of the criminal justice agency policies and CJIS Security Policy in the operation of all information received. Responsibility for management control of the criminal justice function remains solely with the criminal justice agency, as required by the CJIS Security Policy. This agreement covers the overall supervision of all criminal justice agency systems, applications, equipment, systems design, programming, and operational procedures associated with the development, implementation, and maintenance of any criminal justice agency system to include NCIC Programs that may be subsequently designed and/or implemented within the criminal justice agency. Agency Providing IT Service(s)/911 Service(s): Agency Head Name (printed): Agency Head Signature: Date: Criminal Justice Agency Receiving IT Service(s)/911 Service(s): ORI: Agency Head Name (printed): Agency Head Signature: Date: 2019 WSP ACCESS User Acknowledgment Approved by the Attorney General 11/28/18 12