NEW ALBANY POLICE DEPARTMENT - New Albany, Ohio

NEW ALBANY POLICE DEPARTMENT - New Albany, Ohio NEW ALBANY POLICE DEPARTMENT - New Albany, Ohio

newalbanyohio.org
from newalbanyohio.org More from this publisher
23.02.2015 Views

B. Inquiries Inquiry into the vehicle registration, driver’s license information, or other data obtained via NLETS is limited to law enforcement, criminal justice, Department of Motor Vehicles purposes or other legitimate governmental non-criminal justice purposes approved by the Superintendent of the Ohio State Highway Patrol and NLETS. Hazardous material information obtained through NLETS may be released to emergency services personnel outside the criminal justice community (i.e. fire departments and emergency management agencies). 5.4.6 National Crime Information Center (NCIC) It is incumbent upon any agency operating a terminal accessing NCIC to implement the necessary procedures to make that terminal secure from any unauthorized use. Departure from this responsibility may result in the removal of the offending terminal(s) from further NCIC participation. The NCIC uses hardware and software controls to help ensure system security. However, final responsibility for the maintenance of the security and confidentiality of criminal justice information rests with the individual agencies participating in the NCIC system. The standards, procedures, formats and criteria contained in the NCIC Operating Manual must be strictly adhered to. In this respect, the NCIC control terminal agency must not only follow the rules set forth, but must also ensure agencies they are servicing do the same. Use of NCIC services by any user agency shall be in accordance with the instructions and procedures contained in the NCIC Operating Manual, the codes contained in the NCIC Code Manual, and new enhancements contained in the NCIC newsletter or any other official notification from FBI/NCIC. The Interstate Identification Index (III) may only be used for the administration of criminal justice and the hiring of civilian or sworn officers to this department. 5.4.7 LEADS Connected to Agency Owned Equipment The New Albany Police Department shall provide the CPU, monitor(s), and printer(s) for the LEADS terminal. The router and switch is owned by LEADS. The LEADS owned devices should not be removed from the network for any reason, as they are covered under a contract maintained by LEADS. LEADS Control shall be contacted immediately if an issue occurs with the LEADS owned network devices. Terminal equipment shall not be turned off, unplugged or rendered inoperative in any manner except in the case of equipment malfunction preventing operation or if directed by LEADS personnel. LEADS terminals shall not be changed in any manner or moved from the installed position without permission of the LEADS Steering Committee Chairperson or persons authorized by the Chairperson to approve such matters. Modification to, or additions of, any agency owned equipment installations to the LEADS must be approved in writing by the Superintendent of the Ohio State Highway Patrol or persons designated by the Superintendent to authorize these changes. Any local area network terminals accessing LEADS must have the intelligent device (i.e. file server) and its Manager under the management control of a criminal justice agency. The proper agreements (Rule 4501:2-10-13 of the Administrative Rule) must be instituted prior to being permitted access to LEADS. The terminal agency shall notify the LEADS Steering Committee Chairperson in writing at least thirty days in advance of their intention to cancel LEADS service. 21

Agency equipment and/or software believed to be degrading LEADS service must be disconnected until the problem is resolved. Hardware and software connected to the LEADS is not to be interconnected to outside systems without written authorization from the control terminal officer (CTO). All equipment/software use will be monitored continually by LEADS control and randomly by LEADS staff or their representative. Any misuse will be cause for administrative sanction and/or criminal prosecution. All equipment connected to LEADS must be connected through surge protector(s). Due to the sensitivity of the information maintained on the LEADS/NCIC/NLETS systems and to comply with NCIC policy, it is important steps are taken to safeguard these networks from improper access. LEADS access is not permitted on any system or device which can also access the Internet without proper notification to, and approval of, the CTO. Prior to any terminal or device which accesses LEADS being capable of Internet access, the agency must provide to the CTO documentation of the agency’s method of providing for the security of the LEADS. This documentation will be reviewed and written approval issued prior to any device at the agency being capable of accessing both LEADS and the Internet. This restriction also applies to networks which have terminals accessing LEADS and others accessing the Internet. If at any time an incident occurs that may impact the criminal justice agency systems or have the potential to impact LEADS data or the LEADS network, such as denial of service attacks, network intrusion, session hijacking, theft of mobile data terminal, etc. it shall be reported immediately to LEADS Control Center at 614-466-3055 or 1-800-589-2077. The agency personnel that reported the incident must then complete a Computer Incident Report (located in the CJIS Security Policy Attachment B) and fax it to LEADS at 614-644-2459 as soon as possible, but no more than 3 days after the incident. 5.4.8 Sanctions A. LEADS Sanctions Any violation by a terminal user of any of these rules could result in denial of access to LEADS. LEADS has established the following progressive sanction process to enforce these rules while cooperating with agencies to continue to protect the officer in the field. Step 1: Notice of the violation. If the situation is not corrected with documentation to LEADS within six weeks from the date notice is sent, step 2 will be initiated. Step 2: Notice is sent to the agency Manager with a copy also forwarded to the local chief executive or designee. Notice shall include the progressive sanction steps and may include restrictions for specific operators. If the situation continues or the correction is not documented to LEADS within thirty (30) days, step 3 will be initiated. Step 3: The agency participation in LEADS will be reduced to limited access (i.e. inquiry only). Entry of new records into the system will be denied until those already entered are corrected. If corrective action is not taken, including written documentation to LEADS within thirty (30) days, step 4 will be initiated. Step 4: The agency’s access to the Ohio computerized criminal history (CCH) files and the NCIC interstate identification index (III) will be terminated. If corrective action is not completed, including documentation to LEADS within thirty (30) days, step 5 will be initiated. 22

B. Inquiries<br />

Inquiry into the vehicle registration, driver’s license information, or other data obtained via<br />

NLETS is limited to law enforcement, criminal justice, Department of Motor Vehicles<br />

purposes or other legitimate governmental non-criminal justice purposes approved by the<br />

Superintendent of the <strong>Ohio</strong> State Highway Patrol and NLETS.<br />

Hazardous material information obtained through NLETS may be released to emergency<br />

services personnel outside the criminal justice community (i.e. fire departments and<br />

emergency management agencies).<br />

5.4.6 National Crime Information Center (NCIC)<br />

It is incumbent upon any agency operating a terminal accessing NCIC to implement the<br />

necessary procedures to make that terminal secure from any unauthorized use. Departure from<br />

this responsibility may result in the removal of the offending terminal(s) from further NCIC<br />

participation.<br />

The NCIC uses hardware and software controls to help ensure system security. However, final<br />

responsibility for the maintenance of the security and confidentiality of criminal justice information<br />

rests with the individual agencies participating in the NCIC system.<br />

The standards, procedures, formats and criteria contained in the NCIC Operating Manual must be<br />

strictly adhered to. In this respect, the NCIC control terminal agency must not only follow the rules<br />

set forth, but must also ensure agencies they are servicing do the same.<br />

Use of NCIC services by any user agency shall be in accordance with the instructions and<br />

procedures contained in the NCIC Operating Manual, the codes contained in the NCIC Code<br />

Manual, and new enhancements contained in the NCIC newsletter or any other official notification<br />

from FBI/NCIC.<br />

The Interstate Identification Index (III) may only be used for the administration of criminal justice<br />

and the hiring of civilian or sworn officers to this department.<br />

5.4.7 LEADS Connected to Agency Owned Equipment<br />

The <strong>New</strong> <strong>Albany</strong> Police Department shall provide the CPU, monitor(s), and printer(s) for the<br />

LEADS terminal. The router and switch is owned by LEADS. The LEADS owned devices should<br />

not be removed from the network for any reason, as they are covered under a contract<br />

maintained by LEADS. LEADS Control shall be contacted immediately if an issue occurs with the<br />

LEADS owned network devices.<br />

Terminal equipment shall not be turned off, unplugged or rendered inoperative in any manner<br />

except in the case of equipment malfunction preventing operation or if directed by LEADS<br />

personnel.<br />

LEADS terminals shall not be changed in any manner or moved from the installed position<br />

without permission of the LEADS Steering Committee Chairperson or persons authorized by the<br />

Chairperson to approve such matters.<br />

Modification to, or additions of, any agency owned equipment installations to the LEADS must be<br />

approved in writing by the Superintendent of the <strong>Ohio</strong> State Highway Patrol or persons<br />

designated by the Superintendent to authorize these changes. Any local area network terminals<br />

accessing LEADS must have the intelligent device (i.e. file server) and its Manager under the<br />

management control of a criminal justice agency. The proper agreements (Rule 4501:2-10-13 of<br />

the Administrative Rule) must be instituted prior to being permitted access to LEADS.<br />

The terminal agency shall notify the LEADS Steering Committee Chairperson in writing at least<br />

thirty days in advance of their intention to cancel LEADS service.<br />

21

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!