NEW ALBANY POLICE DEPARTMENT - New Albany, Ohio

Agency equipment and/or software believed to be degrading LEADS service must be
disconnected until the problem is resolved.
Hardware and software connected to the LEADS is not to be interconnected to outside systems
without written authorization from the control terminal officer (CTO).
All equipment/software use will be monitored continually by LEADS control and randomly by
LEADS staff or their representative. Any misuse will be cause for administrative sanction and/or
criminal prosecution.
All equipment connected to LEADS must be connected through surge protector(s).
Due to the sensitivity of the information maintained on the LEADS/NCIC/NLETS systems and to
comply with NCIC policy, it is important steps are taken to safeguard these networks from
improper access. LEADS access is not permitted on any system or device which can also access
the Internet without proper notification to, and approval of, the CTO. Prior to any terminal or
device which accesses LEADS being capable of Internet access, the agency must provide to the
CTO documentation of the agency’s method of providing for the security of the LEADS. This
documentation will be reviewed and written approval issued prior to any device at the agency
being capable of accessing both LEADS and the Internet. This restriction also applies to networks
which have terminals accessing LEADS and others accessing the Internet.
If at any time an incident occurs that may impact the criminal justice agency systems or have the
potential to impact LEADS data or the LEADS network, such as denial of service attacks, network
intrusion, session hijacking, theft of mobile data terminal, etc. it shall be reported immediately to
LEADS Control Center at 614-466-3055 or 1-800-589-2077. The agency personnel that reported
the incident must then complete a Computer Incident Report (located in the CJIS Security Policy
Attachment B) and fax it to LEADS at 614-644-2459 as soon as possible, but no more than 3
days after the incident.
5.4.8 Sanctions
A. LEADS Sanctions
Any violation by a terminal user of any of these rules could result in denial of access to
LEADS. LEADS has established the following progressive sanction process to enforce
these rules while cooperating with agencies to continue to protect the officer in the field.
Step 1: Notice of the violation. If the situation is not corrected with documentation to
LEADS within six weeks from the date notice is sent, step 2 will be initiated.
Step 2: Notice is sent to the agency Manager with a copy also forwarded to the local
chief executive or designee. Notice shall include the progressive sanction steps
and may include restrictions for specific operators. If the situation continues or
the correction is not documented to LEADS within thirty (30) days, step 3 will
be initiated.
Step 3: The agency participation in LEADS will be reduced to limited access (i.e. inquiry
only). Entry of new records into the system will be denied until those already
entered are corrected. If corrective action is not taken, including written
documentation to LEADS within thirty (30) days, step 4 will be initiated.
Step 4: The agency’s access to the Ohio computerized criminal history (CCH) files and
the NCIC interstate identification index (III) will be terminated. If corrective action
is not completed, including documentation to LEADS within thirty (30) days, step
5 will be initiated.
22