Arkansas Crime Information Center. ACIC Training Policy



Similar documents
CJIS Online Overview. CJIS Security Awareness Training & Testing Software

CJIS VENDOR AGREEMENT CJIS COMPUTER SYSTEMS COLORADO BUREAU OF INVESTIGATION

CJIS Online Administrator Manual

Lawrence Police Department Administrative Policy. August A. Access to CJIS sensitive data is only available to authorized users.

Law Enforcement Agencies Data System (LEADS) Operator Certification Program (LOCP)

STATE OF WISCONSIN DEPARTMENT OF JUSTICE

FLORIDA DEPARTMENT OF JUVENILE JUSTICE PROCEDURE

UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING

CJIS Division Update

CJIS Online Security Awareness Training. Vendor Guide

GENERAL ORDER DISTRICT OF COLUMBIA I. BACKGROUND

Classification: CJIS Program Manager (UCR/Auditing) Title Code: V00681 Pay Range: 34

Physical Protection Policy Sample (Required Written Policy)

LAW ENFORCEMENT INFORMATION NETWORK INFORMATION MANUAL

MEDICAL UNIVERSITY OF SOUTH CAROLINA DEPARTMENT OF PUBLIC SAFETY

CA Technologies Solutions for Criminal Justice Information Security Compliance

803 CMR: DEPARTMENT OF CRIMINAL JUSTICE INFORMATION SERVICES 803 CMR 7.00: CRIMINAL JUSTICE INFORMATION SYSTEM (CJIS)

County of Santa Clara Emergency Medical Services System

Directory and Messaging Services Enterprise Secure Mail Services

Justice Information Sharing Division ( ND CJIS ), and

STATE OF COLORADO. Standards for the STANDARDIZED FIELD SOBRIETY TESTING (SFST) PROGRAM

Criminal Justice Information Services (CJIS) Security Policy

CJIS Online Security Awareness Training. TAC Guide

Next Generation Identification Program (NGI) Rap Back Service

DEPARTMENT OF STATE POLICE CRIMINAL RECORDS DIVISION CRIMINAL JUSTICE INFORMATION SYSTEMS

Alien Criminal Response Information Management System (ACRIMe)

Criminal Justice Information Services (CJIS) Security Policy

Fingerprint-Based Background Check Responsibilities for Non-Criminal Justice Agencies and Users

CHAPTER TWO LICENSURE: RN, LPN, AND LPTN

Portal User Guide. Customers. Version 1.1. May of 5

DCF Medication Administration Certification Training

NONCRIMINAL JUSTICE AGENCY USE OF CRIMINAL JUSTICE INFORMATION

ILLINOIS REGISTER DEPARTMENT OF STATE POLICE NOTICE OF ADOPTED RULES

How To Protect The Time System From Being Hacked

REGULATION NO. 6 REGULATIONS GOVERNING THE LICENSING AND PRACTICE OF OCCUPATIONAL THERAPISTS

Information Technology. Security Awareness Training for Administrative Personnel

CODE OF MARYLAND REGULATIONS (COMAR) As Amended through August 8, 2011

CHAPTER 11 CONCEALED WEAPON LICENSE POLICY

Appendix 1: Approved Rap Back Privacy Risk Mitigation Strategies Version June 1, 2014

Pre-Employment Background Checks. October 2, 2006

Reclamation Manual Directives and Standards

INTERNATIONAL ASSOCIATION OF CHIEFS OF POLICE. Guiding Principles on Cloud Computing in Law Enforcement

CJIS Information Technology Security Audit (ITSA) 2015 Program Update

11B Criminal Justice Training Schools Request for Certification,

SUBCHAPTER 4H ORGANIZATIONAL FUNCTIONS AND DEFINITIONS

Criminal Justice Information Services (CJIS) Law Enforcement National Data Exchange (N-DEx) Policy and Operating Manual

Certified Application Counselor Update MTF October 2014

NC CJIN Governing Board. 13 October, George A. White

Criminal Justice Information System (CJIS) Vendor Policy Guidelines

Distance Education Certification Program Secondary Provider Application for Subsequent Course Certification This application is required for

Learning Management System (LMS) Frequently Asked Questions

Automated Regional Justice Information System (ARJIS) Acceptable Use Policy for Facial Recognition

Insurance Adjuster Certification Program

FAQs for Password Self Service

YEAR TWO. Total Credits 3 Total Credits 6 Total Credits 3 Total Credits 6 Total Credits 6

CHAPTER 120c. TRAINING AND CERTIFICATION STANDARDS FOR 911 EMERGENCY COMMUNICATIONS PERSONNEL

GRS Advantage Website User Reference Guide

APPENDIX H SECURITY ADDENDUM

City of Oak Creek. Class Title: Emergency Services Dispatcher. Division: Administrative Location: Police Station

Denver Public Schools - East High School

SECURITY and MANAGEMENT CONTROL OUTSOURCING STANDARD For NON-CHANNELERS

FBI CJIS SECURITY ADDENDUM

Agency # Rules and Regulations. for the. Arkansas Long Term Care Facility. Nursing Assistant Training Program

HIPAA Information Security Training (v1.0 10/15/12)

SMALL BUSINESS/SMALL DIVERSE BUSINESS APPLICATION INSTRUCTIONS

HUDSON VALLEY REGIONAL MEDICAL ADVISORY COMMITTEE REGIONAL CREDENTIALING AND CONTINUING MEDICAL EDUCATION POLICIES AND PROCEDURES

Network Service Policy

Alberta Reliability Standard Cyber Security Personnel & Training CIP-004-AB-5.1

ADM:49 DPS POLICY MANUAL Page 1 of 5

Noncriminal Justice Agency Guide

Approved By: Agency Name Management

South Carolina Law Enforcement Division Criminal Justice Information System (CJIS)

Security awareness training is not a substitute for the LEADS Security Policy.

Vendor User Accounts managing your NAP User Account

Criminal Justice Information Services (CJIS) Security Policy

Delete Regulation 73-40(1)-(36) and replace with the proposed regulations ( through ).

Virtualization Demystified

FOR SHARING LAW ENFORCEMENT INFORMATION

BATON TRAINING COURSE ACCREDITATION Guidelines for Accreditation Application

VOLUNTEER & EMPLOYEE CRIMINAL HISTORY SERVICE (VECHS) USER AGREEMENT FOR CRIMINAL HISTORY RECORD INFORMATION

Page 1 of 23. Elections Funds Management Voter Registration Expense System

CHAPTER 5 SATISFACTION OF MINIMUM PEACE OFFICER TRAINING REQUIREMENTS

Department of Criminal Justice Training

Senate Bill 9 Background Checks for Education A Reference Guide January 1, 2008

General Investigation Training Course Blended Learning Guide

Privacy Impact Assessment Update for the

Criminal Justice Information Services (CJIS) Security Policy

Distance Education Certification Program Secondary Provider Application for Initial Certification This application is required for secondary

GUIDELINES FOR THE SMALL BUSINESS PROCUREMENT INITIATIVE HARRISBURG, PENNSYLVANIA PROCUREMENT SERVICES PROCUREMENT GOODS INFORMATION TECHNOLOGY

Transcription:

Arkansas Crime Information Center ACIC Training Policy pg. 1 Approved by the ACIC Supervisory Board December 4, 2015

ACIC Training Policy Training is necessary for the proper and effective use of the state and national computer systems. Required training is defined in the ACIC Training Policy, as approved by the ACIC Supervisory Board. All individuals with access to Criminal Justice Information (CJI), must be trained. This includes individuals who may be exposed to the data as part of their job duties, but who do not actually use the data to perform their job. Examples of these individuals include clerical personnel, unescorted janitorial and maintenance personnel, vendors, and information technology (IT) personnel. The ACIC System Regulations, Section 10, contains eligibility requirements to receive CJI. Training must be completed within six (6) months of initial assignment, and biennially thereafter. Contractors who receive CJI as part of a service provided to authorized noncriminal justice recipients of CJI must be retrained annually. CJIS Security Training Personnel who do not access CJI directly through the operation of an access device, can obtain training online at, www.cjisonline.com. Contact ACIC, the agency s TAC, or non criminal justice agency coordinator (NAC) to establish a user account. There are 2 Levels of CJIS Security Training: Level 1 All personnel with access to Criminal Justice Information (CJI). This level is designed for people who do not have physical and logical access to CJI but may encounter it in their duties. Level 3 All personnel with Information Technology Roles. This level is designed for all information technology personnel including system administrators, security administrators, network administrator, etc. Direct Access Training Within five (5) days of an employee being hired or reassigned to operate an ACIC Access Device, the terminal agency coordinator (TAC), or other designated personnel, must notify ACIC by completing a Request For ACIC Training form and sending it to ACIC. This form must be utilized and submitted prior to any ACIC training. Upon receiving a Request For ACIC Training form, ACIC personnel will review the form for completeness and accuracy. Upon approval of the form, ACIC will assign the new operator a pg. 2 Approved by the ACIC Supervisory Board December 4, 2015

temporary user name and password. The temporary user name and password will be set to expire after the date of the class requested on the Request For ACIC Training form. The TAC must notify ACIC as soon as possible when an operator leaves the employment of the agency. ACIC will update the operator s training record and security authorizations. ACIC training for access device operators consists of two (2) levels. Basic Certification Training Basic Certification training is required of all individuals operating an ACIC access device. Training is required prior to certification. The Basic Certification class consists of at least four (4) hours of training on ACIC policy, procedures and the laws regulating the access and use of the ACIC system and ACIC data. After having attended a Basic Certification training class, the operator must successfully complete an examination with a minimum score of 70%. After successful completion of the class and test, the operator is considered certified to operate an ACIC access device as a Limited Access Operator. Certification is valid for two (2) years from the test date. THERE IS A MANDATORY WAITING PERIOD OF 30 DAYS BETWEEN SUCCESSFUL COMPLETION OF BASIC CERTIFICATION TRAINING AND ATTENDING AN ADVANCED CERTIFICATION TRAINING CLASS. Advanced Certification Training Advanced Certification training is required of all ACIC access device operators who wish to enter or modify data in the ACIC system. Basic Certification training is a prerequisite, and training is required prior to certification. The Advanced Certification class consists of at least thirty two (32) hours of instruction. After successful completion of the class, the operator must successfully complete an examination with a minimum score of 70%. After successful completion of the class and test, the operator is considered certified to operate an ACIC access device as a Full Access Operator. Certification is valid for two (2) years from the test date. Arkansas law and NCIC regulations require that some entries are to be made immediately, (e.g. Missing Persons). Therefore, Full Access Agencies (entry capable), shall provide sufficient quantities of Advanced Certification trained personnel to ensure compliance with this requirement on a 24/7 basis. Retraining pg. 3 Approved by the ACIC Supervisory Board December 4, 2015

In order to maintain certification, operators must successfully retrain and/or retest before their certification expires. Beginning thirty (30) days prior to the expiration of an operator s certification, each time the operator signs on, the ACIC system will generate reminders that their certification is about to expire. Limited Access certified operators may log onto the CJIS Launchpad to take the appropriate recertification refresher training online, and then complete the nextest recertification test. Successful completion of the test will result in the operator s certification date automatically being extended two (2) years. Full Access certified operators may log onto the CJIS Launchpad to take the appropriate recertification test. Successful completion of the test will result in the operator s certification date automatically being extended two (2) years, or if deemed appropriate by their Agency TAC, they may attend an Advanced Certification refresher class held periodically throughout the year at various locations. Successful completion of the test will result in the operator s certification date automatically being extended two (2) years. Intra Agency Training A terminal agency may provide training on ACIC topics, provided training plans and trainers are approved by ACIC. ACIC can provide training materials to agency instructors; however, before ACIC will approve any agency to conduct any classes, the agency and instructor must provide ACIC with proof that the agency instructor(s) holds a current instructor certification from Arkansas Commission on Law Enforcement Standards and Training (CLEST)and a current Advanced Certification. All materials to be utilized by an agency instructor, including but not limited to, PowerPoint presentations, outlines, handout materials, etc. shall be first provided to ACIC for review and approval. All instruction on the ACIC system shall be under the guidance of the ACIC Training Manager, Operations Administrator, and/or ACIC Director. A copy of the agency instructor s training and certification shall be provided to the ACIC Training Manager and shall remain on file with ACIC as part of the training record. ACIC may audit classes at any time. ACIC Instructors All instructors conducting any training on ACIC subject matter must hold a current instructor certification from Arkansas Commission on Law Enforcement Standards and Training (CLEST). ACIC instructors must hold a current Advanced Certification. Commission on Law Enforcement Standards and Training The ACIC Basic Certification, Advanced Certification, and Recertification classes are certified by the Arkansas Commission on Law Enforcement Standards and Training (CLEST). Students who successfully complete either one of these courses may apply for credit with CLEST by submitting a copy of their class certificate to: pg. 4 Approved by the ACIC Supervisory Board December 4, 2015

Office of Law Enforcement Standards #4 State Police Plaza Drive Little Rock, AR 72209 Phone: (501) 682 2260 Fax: (501) 682 1582 Special Circumstances Special circumstances may arise in which an operator forgets his or her password or the operator's password or training certification expires unexpectedly. The operator should notify his or her TAC. The TAC should then contact ACIC. In the event the operator is unable to contact their TAC, the operator may contact ACIC directly. The Training Manager, or his or her designee, will verify the training history of the operator and reset the password. In the event the operator s certification has expired, the ACIC Training Manager, or designee, will consult with the TAC and reset the certification expiration date to a reasonable future date to allow the operator an opportunity to renew their certification. Operator may log into the online testing system and recertify up to one year after their certification expires without attending a physical class. If, however, the operator s certification is expired for more than one (1) year, the Training Manager and TAC may coordinate a training plan for the employee. The plan may include online testing or attendance in the first available physical class appropriate for the operator s level of certification. This shall be done at the discretion of the Training Manager or his or her designee. Glossary Access device A computer terminal, microcomputer workstation, mobile data device or other electronic equipment used to communicate with the ACIC computer system. Advanced Certification Training Training required of terminal operators who are considered to have full access and are authorized to enter, modify, clear, and query data. Basic Certification Training The initial training required of all terminal operators that allows operator to only query and clear ACIC data. CJIS Launchpad A web based portal to ACIC documents, training, testing, and other resources for authorized users of the ACIC system. CJIS Online The electronic training module for CJIS Security training for personnel who are exposed to, or use CJI, but who do not operate an ACIC access device. CJIS Online can be accessed at the following URL: www.cjis.online.com pg. 5 Approved by the ACIC Supervisory Board December 4, 2015

Criminal Justice Information (CJI) Criminal Justice Information is the term used to refer to all of the ACIC and FBI CJIS provided data necessary for law enforcement and civil agencies to perform their missions including, but not limited to biometric, identity history, biographic, property, and case/incident history data. Full Access Operator A terminal operator who has the authority to enter, modify, clear and query data on the ACIC system, and perform other functions covered in the Advanced Certification course of training. Intra Agency Training ACIC training conducted by the terminal agency. Limited Access Operator A terminal operator who has the authority to conduct query transactions, send administrative messages, and perform other functions covered in the Basic Certification course of training. NAC The Non criminal Justice Agency Coordinator is the primary liaison between a noncriminal agency and ACIC, and represents the agency on matters relating to ACIC. nextest The electronic testing module used by ACIC to certify personnel on training standards. Physical and Logical Access The user has direct contact with a computer or other electronic device that allows the user to query, read, create, modify or delete a file, record or program on a system containing CJI information. TAC The Terminal Agency Coordinator is the primary liaison between the terminal agency and ACIC, and represents the agency on matters relating to ACIC. Terminal Operator Anyone within the agency who uses an access device to access information from the ACIC system. pg. 6 Approved by the ACIC Supervisory Board December 4, 2015