Todd C. Commodore George White Michael McIntyre - International ...

33 downloads 446 Views 1MB Size Report
Information Security Officer. Information Technology. Security Program. (304) 625 – 5849 [email protected]. Michael McIntyre. Supervisory IT Specialist.
FBI CJIS & the APB Todd C. Commodore Unit Chief CJIS Audit Unit (304) 625 – 2836 [email protected]

George White Information Security Officer

Information Technology Security Program

(304) 625 – 5849 [email protected]

Michael McIntyre Supervisory IT Specialist CJIS Audit Unit (304) 625 - 2988 [email protected]

CJIS DIVISION SERVICES The Criminal Justice Information Services (CJIS) Division was established in February 1992 to serve as the focal point and central repository for criminal justice information (CJI) services in the FBI. It is the largest division of the FBI and is housed on 986 acres of land in Clarksburg, West Virginia. The heart of the complex is 500,000 square feet, roughly the size of three football fields. The CJIS Division’s mission is to equip our law enforcement, national security, and intelligence community partners with the criminal justice information services while preserving civil liberties.

CJIS DIVISION SERVICES Where does the criminal justice information come from? • Local

• State

• Tribal

• Federal

Because the information is shared… • The FBI CJIS Division employs a shared management philosophy

What does ‘shared management’ mean? • The FBI along with local, state, tribal, and federal data providers and system users share responsibility for the operation and management of all systems administered by the CJIS Division for the benefit of the criminal justice community.

CJIS DIVISION SERVICES How does ‘shared management’ work? • Designation of a CJIS Systems Agency (CSA) • Designation of a CJIS Systems Officer (CSO) • CJIS Advisory Process

The CJIS Advisory Process is used to… • obtain the user community’s advice and guidance on the operation of all of the CJIS programs • establish a minimum standard of requirements to ensure continuity of information protection (write minimum policy standards) • represent the shared responsibility between the FBI CJIS, CJIS Systems Agency (CSA), and the State Identification Bureaus (SIB) of the lawful use and appropriate protection of CJI

CJIS ADVISORY PROCESS

CJIS Advisory Policy Board

Subcommittees

5 Working Groups

CJIS ADVISORY PROCESS FIVE WORKING GROUPS:

FEDERAL WORKING GROUP

CJIS ADVISORY PROCESS What does the Working Groups (WGs) do? • Review operational, policy, and technical issues related to CJIS Division programs and policies and make recommendations to the APB or one of its subcommittees • All 50 states, as well as U.S. territories and the Royal Canadian Mounted Police (RCMP) are organized into 5 Working Groups: Northeastern, North Central, Southern, Western, and Federal • The four regional WGs are composed of: - One state-level agency representative selected by the Administrator of each states CJIS System Agency (CSA) - One local-level agency representative selected by the IACP or NSA along with State Chiefs’ or Sheriffs’ Association - One representative for the District of Columbia, Guam, RCMP, Puerto Rico, and the U. S. Virgin Islands - One Tribal law enforcement representative for each region. • The Director has the option to designate one additional representative for each 5 WGs.

CJIS ADVISORY PROCESS What are the Local Agency Representative Responsibilities? • Represent the interests of the CJIS Advisory Process during meetings/conferences with criminal justice agency representatives in their state in order to solicit topics for discussion to improve the CJIS Division systems • Represent the views of all local agencies in their states on issues being addressed during WG meetings

What are the State Agency Representative Responsibilities? • Represent the views of the CSA concerning issues being addressed during WG meetings • Represent the views of all agencies in the state on issues being addressed during WG meetings and keep agencies informed of current issues

CJIS ADVISORY PROCESS NINE SUBCOMMITTEES: •

Uniform Crime Reporting (UCR)



APB Executive Committee



Compliance Evaluation (formerly Sanctions)



National Crime Information Center (NCIC)



Identification Services (IS)



N-DEx (formerly Information Sharing)



Security and Access



National Instant Criminal Background Check System (NICS)



Bylaws

CJIS ADVISORY PROCESS Who makes up the Advisory Policy Board (APB)? There are 34 total members that make up the APB: • 5 FBI Director appointees -

1 represents judiciary agencies 1 represents prosecutorial agencies 1 represents correctional agencies 1 individual representing national security 1 tribal law enforcement representative

• 20 selected by the four regional Working Groups -

12 state agency representatives 8 local agency representatives 5 FBI Director Appointees

• 1 Chairman of the Federal Working Group • 8 professional criminal justice association representatives -

International Association of Chiefs of Police (IACP) National Sheriffs’ Association (NSA) National District Attorneys’ Association American Probation and Parole Association Major Cities Chiefs’ Association Major County Sheriffs’ Association American Society of Crime Laboratory Directors Courts or Court Administrators chosen by the Conference of Chief Justices

CJIS ADVISORY PROCESS How do you submit a topic for review? •

Topics for discussion at CJIS WG meetings may be submitted at any time



The CJIS Division sends a solicitation for agenda items biannually to all WG Chairs and WG members with a 30 day deadline for submission of topics



Topics should be submitted in writing



Topic proposals may be submitted three ways – State and local agencies submit topic proposals to the CJIS Systems Officer for their state or the CSA – State Identification Bureaus may submit topic proposals to the CSO or directly to the CJIS Division – Professional organizations submit topic proposals directly to the CJIS Division



Topic proposals are forwarded to the CJIS Division and the appropriate staff will analyze each proposal and make a determination as to whether it will be a topic for the next round of Advisory Process meetings. The WG Chairs coordinate the agenda for the WG meetings with CJIS Division staff.

CJIS AUDIT UNIT Why does the FBI audit? • Formal audits are conducted to ensure compliance with applicable statutes, regulations and policies • Information housed in CJIS systems is obtained from the user community; the audit ensures that all agencies with access protect the data of the community at large

What does the audit accomplish? • Assists agencies with compliance • Verifies adherence to policy and procedure • Evaluates agency practices and procedures and their effectiveness • Improves and ensures the integrity of the system data • Protects and safeguards criminal justice information (CJI) • Protects continuity of information • Limits agency liability • Improves officer safety and public safety

CJIS AUDIT UNIT What does the FBI audit? •

National Crime Information Center (NCIC)



Integrated Automated Fingerprint Information System (IAFIS)



Uniform Crime Reporting (UCR)



Law Enforcement National Data Exchange (N-DEx)



National Instant Criminal Background Check System (NICS)



Information Technology Security Audit (ITSA)

How often does the FBI audit? •

Once every three (3) years at a minimum

CJIS AUDIT UNIT Who does the FBI audit? • Each CJIS Systems Agency (CSA)

If the audit is of the CSA, why do local agencies participate? • In order to assess each state’s overall compliance, the FBI CJIS Audit Unit (CAU) selects a number of local law enforcement agencies throughout the state to participate in the audit of their CSA • If your local agency has been selected to participate, it is only because the agency accepts access to criminal justice information (CJI) through your state CSA

I received an audit from my CSA, is this the same? • No, much like the APB requires the FBI to audit each CSA, each CSA must audit all criminal justice agencies (CJAs) with access to CJIS systems within their state. Although content will be similar, the audit is not the same.

CJIS AUDIT UNIT If my local agency is chosen, what can I expect? • Initial call from the FBI Auditor (contact information for this call is provided by the CSA) • Official written notice is sent to the Head of the Agency (Chief or Sheriff) • Pre-audit material forwarded electronically to audit point of contact - Provides general idea of topic areas that will be discussed - List of documentation the agency is required to provide - Provides an idea of who to have present during the audit • Onsite audit includes an administrative interview conducted with appropriate agency personnel. Following the interview, the auditor may perform a physical security inspection, which involves a tour of the facility, including anywhere the agency is processing, storing, or accessing CJI • Agency documentation is reviewed • At the conclusion of the audit, the agency will receive a policy assessment packet. The packet summarizes those policy requirements assessed during the audit, but the packet also provides the agency’s compliance status. Any concerns or compliance issues found will be discussed with appropriate agency personnel at the time of the audit.

CJIS AUDIT UNIT What happens following the local audit? • All local agency audit findings are compiled into a draft report and provided to the CSA roughly 60 days following the onsite audit • The CSA is then given 30 days to respond with corrective action plans for each local agency that participated in their audit • The CSA will work with each local agency on a strategy to bring that agency into compliance • The APB’s Compliance Evaluation Subcommittee reviews the audit results and the corresponding responses to determine the course of action necessary to bring agencies into compliance • The APB’s Compliance Evaluation Subcommittee routinely considers long-term strategies, sometimes over several budget cycles, when approving plans for corrective action

CJIS SECURITY POLICY When was the CJIS Security Policy created? •

In 1992, the FBI incorporated the CJIS security policies as part of the NCIC Operating Manual



In 1998, with increased technological advances in telecommunications and systems architecture, the APB recommended that the FBI CJIS Division authorize the establishment of a security management infrastructure



As a result, the FBI CJIS Division wrote the CJIS Security Policy which was approved by the FBI Director in 1999



The essential premise of the CJIS Security Policy is to provide appropriate controls to protect the full lifecycle of CJI and applies to every individual access to, or who operate in support of, criminal justice services and information



The Policy is periodically updated to reflect the security requirements of evolving business models



The provided security criteria assists agencies with designing and implementing systems to meet a uniform level of risk and security protection while enabling agencies the latitude to institute more stringent security requirements and controls based on their business model and local needs

CJIS SECURITY POLICY How has the CJIS Security Policy evolved? •

Due to advancing technology and evolving business models, the policy was recently transitioned from information system focused to data (information) focused



The transition from 4.5 – 5.0 (approved in Feb 2011), provided agencies with the flexibility to implement the minimum set of security requirements regardless of the information systems or network infrastructure implemented – this involved a significant number of changes to the policy



Multi-year effort



Over 3,000 hours



A CJIS Security Policy Working Group task force was composed of local, state, tribal, and federal representation that included both criminal justice agencies ( CJAs) and noncriminal justice agencies (NCJA)

CJIS SECURITY POLICY What is the Requirements and Transition Document? •

Every “shall” statement contained within the CSP has been scrutinized for risk versus the reality of resource constraints and real-world application



A significant number of “shall” statements were added to the CSP during the policy transition to architectural independence (Version 4.5 to 5.0)



Existing policy requirements, carried over from previous versions, are listed with the former policy reference



New Requirements, not previously mandated in policy, are listed with a “required by” year from 2011-2014 based on a number of factors including, among other things: cost, threat, technological innovations, and realistic need



The dates applied to new requirements are spread across several years, but the intent is for agencies to start working toward them immediately, where possible, and leverage the requirements document as a tool for financial planning and justification to meet requirements that cannot be met immediately

THE ADVISORY POLICY AT WORK Visitor Access Records… •

CJIS Security Policy, Version 5.1, Section 5.9.1.8 Access Records - The agency shall maintain visitor access records to the physically secure location (except for those areas officially designated as publicly accessible) that includes: Name and agency of the visitor, Form of identification, Date of access, Time of entry and departure, Purpose of visit, and Name and agency of person visited.



Amarillo Police Department contacted CSA - Local agency was concerned that requiring visitors, victims, witnesses, or persons of interest, etc. to log in and out of secure locations such as the detectives division would have a “chilling effect on their willingness to come to the police department”



Requirement will be removed from CJIS Security Policy Version 5.2 - Working Groups (2 for deletion, 2 for no change, 1 for additional definitions to exclude certain “visitors”); Security and Access voted to amend policy and only require for data center; APB ultimately voted to remove from the policy

CLOUD COMPUTING SOLUTIONS Does the CJIS Security Policy cover cloud computing? •

The CJIS Security Policy does not explicitly preclude agencies from implementing Cloud Computing Solutions



The policy does not have a specific section devoted to ‘cloud computing’, but the security requirements are written to apply to the protection of CJI no matter the infrastructure employed



Agencies must ensure their information security and privacy requirements are met, given the risks posed by cloud computing solution



In light of the requirements for vetting cloud provider services, there are changes (currently en route through the advisory process) that will provide clarity and ensure that the Policy is comprehensive



The ISO Program Office has provided ‘Recommendations for Implementation of Cloud Computing Solutions’ (available via www.fbi.gov)



The ISO Program Office has also provided a ‘Mobile Appendix’, soon to be added to the policy, to assist agencies in implementing mobile device access to CJI

www.fbi.gov/about-us/cjis/cjis-security-policy-resource-center/view

CLOUD COMPUTING SOLUTIONS Description of the Issues… •

The ‘Recommendations for Implementation of Cloud Computing Solutions’ report provides recommendations for specific policies and procedures to be followed by CJIS community members implementing cloud computing solutions



There are a number of technical and operational issues that must be considered when evaluating potential cloud computing solutions



These include… -

Transmission of data Storage of data Application Access and Service Layering Emergency Access and Disaster Recovery Retention and Backup Legal Access Authorization, Authentication methods, and Identity Management Service Provider Viability and Structure Audit and Monitoring Capabilities and Authorization Cryptographic Key and Certificate Management

APB CONTACT INFORMATION CHAIRMAN

1st VICE CHAIRMAN

CAPTAIN THOMAS TURNER Division Commander

SHERIFF KATHY WITT Sheriff of Fayette County

Address:

Phone:

Criminal Justice Information Services Virginia State Police Post Office Box 2747 Richmond, VA 23261-7472 (804) 674 - 4605

Address:

Phone:

Fayette County Sherriff's Office Suite 265 150 North Limestone Lexington, KY 40507 (859) 252 - 1771

2nd VICE CHAIRMAN

DESIGNATED FEDERAL OFFICER

MR. MICHAEL MCDONALD Director Information Technology

MR. SCOTT TRENT

Address:

Address:

Phone:

Delaware State Police 1441 North DuPont Highway Dover, DE 19901 (302) 672 – 5444

Phone:

FBI/CJIS Division 1000 Custer Hollow Road Clarksburg, WV 26306-0149 (304) 625 – 5263

LOCAL AND STATE APB CONTACT INFORMATION ALABAMA:

ALASKA:

ARIZONA:

Mr. Charles “Jeff” Matthews [email protected]

(334) 517 - 2500

Mr. Wally Olson Sheriff of Dale County [email protected]

(334) 774 - 2335

Ms. Kathryn M. Monfreda [email protected]

(907) 269 - 5581

Mr. Gregory Browning Chief of Police Juneau Police Department [email protected]

(907) 500 - 0677

Lieutenant Colonel Jeffrey E. Raynor [email protected]

(602) 223 - 2400

Captain Scott Wright Kingman Police Department [email protected]

(928) 753 - 8163

LOCAL AND STATE APB CONTACT INFORMATION ARKANSAS:

CALIFORNIA:

COLORADO:

Mr. Billy Clinton [email protected]

(501) 682 - 7409

Mr. Stuart Thomas Chief of Police Little Rock Police Department [email protected]

(501) 371 - 4621

Ms. Julie Basco [email protected]

(916) 227 - 3854

Mr. Edward "Ed" Bonner Sheriff of Placer County [email protected]

(530) 889 - 7880

Mr. Karl Wilmes [email protected]

(303) 239 - 4221

Mr. Terry Maketa Sheriff of El Paso County [email protected]

(719) 520 - 7204

LOCAL AND STATE APB CONTACT INFORMATION CONNECTICUT:

DELAWARE:

DISTRICT OF COLUMBIA:

Ms. Joan Hilliard [email protected]

(860) 685 - 8020

Mr. Jeffrey W. Finch Chief of Police Bethel Police Department [email protected]

(203) 744 – 7900

Mr. Michael McDonald [email protected]

(302) 672 - 5444

Mr. W. Scott Collins Chief of Police Selbyville Police Department [email protected]

(302) 436 - 5085

Mr. Ted Zalewski [email protected]

(202) 727 - 8712

LOCAL AND STATE APB CONTACT INFORMATION FLORIDA:

GEORGIA:

HAWAII:

Ms. Donna M. Uzzell [email protected]

(850) 410 - 7100

Ms. Loretta Gabe-Charles Miami-Dade Police Department [email protected]

(305) 471 - 3407

Ms. Terry Gibbons [email protected]

(404) 270 - 8403

Major Elaine Snow Chief of Police Rome Police Department [email protected]

(706) 238 - 5100

Ms. Brenda Abaya [email protected]

(808) 587 - 3282

Captain Paul Dwayne Calvey Honolulu Police Department [email protected]

(808) 723 - 8755

LOCAL AND STATE APB CONTACT INFORMATION IDAHO:

ILLINOIS:

Ms. Dawn A. Peck [email protected]

(208) 884 - 7136

Mr. Shaun R. Gough Sheriff of Gooding County [email protected]

(208) 934 - 4421

Ms. Carol A. Gibbs [email protected]

(217) 782 - 0539

Mr. Bill Feithen (309) 734 - 4985 Chief of Police Monmouth Police Department [email protected] INDIANA:

Lieutenant Colonel John W. Clawson [email protected]

(317) 233 - 3107

Mr. Tracy Brown Sheriff of Tippecanoe County [email protected]

(765) 423 - 9388 ext. 200

LOCAL AND STATE APB CONTACT INFORMATION IOWA:

KANSAS:

KENTUCKY:

Mr. Leon J. Frederick [email protected]

(515) 725 - 6202

Mr. Jeremy Logan Chief of Police Oelwein Police Department [email protected]

(319) 283 - 4311

Captain Randy Moon [email protected]

(785) 368 - 6517

Mr. Robert S. Sage Chief of Police Rose Hill Police Department [email protected]

(316) 776 - 0191

Lieutenant Colonel Brad Bates [email protected]

(502) 782 - 1799

Ms. Kathy Witt Sheriff of Fayette County [email protected]

(859) 252 - 1771

LOCAL AND STATE APB CONTACT INFORMATION LOUISIANA:

MAINE:

MARYLAND:

Ms. Kimberly Pierce [email protected]

(225) 925 - 1897

Mr. Richard E. Edwards, Jr. Louisiana Sheriffs' Association [email protected]

(225) 343 - 8402

Lieutenant Jackie Theriault [email protected]

(207) 626 - 3922

Mr. Edward Googins Chief of Police South Portland Police Department [email protected]

(207) 799 - 5511 x7230

Ms. Jillian S. Watts [email protected]

(410) 653 - 8247

Ms. Lynda G. Lovette Baltimore City Police Department [email protected]

(410) 637 - 8874

LOCAL AND STATE APB CONTACT INFORMATION MASSACHUSETTS:

MICHIGAN:

MINNESOTA:

Mr. James F. Slater, III [email protected]

(617) 660 - 4761

Mr. James J. Hurley Chief of Police Leicester Police Department [email protected]

(508) 892 - 7013

Ms. Dawn Brinningstaull [email protected]

(517) 241 - 0421

Mr. Blaine A. Koops Sheriff of Allegan County [email protected]

(269) 673 - 0510

Mr. Robert P. Johnson [email protected]

(651) 793 - 1012

Mr. Rick Wyffels Chief of Police Alexandria Police Department [email protected]

(320) 759 - 3700

LOCAL AND STATE APB CONTACT INFORMATION MISSISSIPPI:

MISSOURI:

MONTANA:

Ms. Margaret Cavett [email protected]

(601) 933 - 2647

Mr. James Sharpe Assistant Chief Meridian Police Department [email protected]

(601) 485 - 1862

Major Timothy P. McGrail [email protected]

(573) 526 - 6110

Mr. J. Kent Oberkrom Sheriff of Henry County [email protected]

(660) 885 - 7300

Mr. Joseph Wodnik [email protected]

(406) 444 - 9759

Mr. Clifford D. Brophy Sheriff of Stillwater County [email protected]

(406) 322 - 5326

LOCAL AND STATE APB CONTACT INFORMATION NEBRASKA:

NEVADA:

NEW HAMPSHIRE:

Mr. Thomas R. Prevo [email protected]

(402) 471 - 4545

Lieutenant David "Dave" Butler Buffalo County Sheriff’s Office [email protected]

(308) 236 - 8555

Mr. Patrick J. Conmay [email protected]

(775) 684 - 6222

Mr. Anthony DeMeo Sheriff of Nye County [email protected]

(775) 751 - 7012

Ms. Mary Kay MacNichol [email protected]

(603) 223 - 8425

Mr. Gerald S. Lewis Chief of Police Windham Police Department [email protected]

(603) 434 - 5577

LOCAL AND STATE APB CONTACT INFORMATION NEW JERSEY:

NEW MEXICO:

NEW YORK:

Sergeant First Class David Quigley [email protected]

(609) 882 - 2000 x2503

Mr. Dennis P. Manning Chief of Police Somerville Police Department [email protected]

(908) 725 - 0331

Ms. Regina Chacon [email protected]

(505) 827 - 9297

Mr. Julian M. Gonzales Chief of Police Bernalillo Police Department [email protected]

(505) 771 - 5877

Colonel Steven F. Cumoletti [email protected]

(518) 457 - 6622

Mr. Michael C. Biasotti (845) 563 - 4654 Chief of Police Town of New Windsor Police Department [email protected]

LOCAL AND STATE APB CONTACT INFORMATION NORTH CAROLINA:

Ms. Wendy L. Brinkley [email protected]

(919) 662 - 4509 x6302

NORTH DAKOTA:

Mr. James Crow [email protected]

(701) 328 - 8152

Mr. Rory M. Teigen Sheriff of Bowman County [email protected]

(701) 523 - 5421

Mr. Jeremy Hansford [email protected]

(614) 728 - 1240

Mr. Gary M. Lyons Chief of Police Monroeville Police Department [email protected]

(419) 465 - 2474

OHIO:

LOCAL AND STATE APB CONTACT INFORMATION OKLAHOMA:

OREGON:

PENNSYLVANIA:

Mr. Gene Thaxton [email protected]

(405) 425 - 2231

Lieutenant Kyle Gibbs Stillwater Police Department [email protected]

(405) 742 - 8318

Mr. Terrill W. O’Connell [email protected]

(503) 378 - 3055 x55020

Mr. Brian Wallace Chief Civil Deputy Marion County Sheriff's Office [email protected]

(503) 589 - 3271

Lieutenant Christopher L. Storm [email protected]

(717) 346 - 5366

Lieutenant Joseph Lapetina Philadelphia Police Department [email protected]

(215) 686 - 1287

LOCAL AND STATE APB CONTACT INFORMATION RHODE ISLAND:

SOUTH CAROLINA:

SOUTH DAKOTA:

Mr. William K. Guy [email protected]

(401) 444-1033

Mr. Edward Mello Chief of Police Jamestown Police Department [email protected]

(401) 423 - 1714

Major Roger W. Owens [email protected]

(803) 896 - 0059

Major James Stewart Richland County Sheriff's Office [email protected]

(803) 576 - 3045

Mr. Delton K. Tipton [email protected]

(605) 773 - 4636

Mr. Lee McPeek Assistant Chief Watertown Police Department [email protected]

(605) 882 - 5255

LOCAL AND STATE APB CONTACT INFORMATION TENNESSEE:

TEXAS:

UTAH:

Mr. Bradley "Brad" Truitt [email protected]

(615) 744 - 4008

Captain Gary Holliday Knoxville Police Department [email protected]

(865) 215 - 7345

Mr. Michael C. Lesko [email protected]

(512) 424 - 2524

Mr. Brent Stroman Chief of Police Waco Police Department [email protected]

(254) 750 - 7501

Ms. Alice Moffat [email protected]

(801) 965 - 4939

Mr. James O. Tracy Utah County Sheriff's Office [email protected]

(801) 851 - 4001

LOCAL AND STATE APB CONTACT INFORMATION VERMONT:

VIRGINIA:

WASHINGTON:

Mr. Jeffrey Wallin [email protected]

(802) 241 - 5220

Mr. Trevor Whipple Chief of Police South Burlington Police Department [email protected]

(802) 846 - 4155

Captain Thomas W. Turner [email protected]

(804) 674 - 4605

Colonel Doug Middleton Chief of Police Henrico County Police Division [email protected]

(804) 501 - 4840

Mr. Jim Anderson [email protected]

(360) 534 - 2101

Mr. Richard Bishop Chief Deputy Clark County Sheriff’s Office [email protected]

(360) 397 - 6043

LOCAL AND STATE APB CONTACT INFORMATION WEST VIRGINIA:

WISCONSIN:

WYOMING:

Ms. Deborah L. Beckner [email protected]

(304) 746 - 2155

Mr. William E. Kelly Beckley Police Department [email protected]

(304) 256 - 1765

Mr. Walt Neverman [email protected]

(608) 264 - 6207

Mr. Terrence Dryden Sheriff of Washburn County [email protected]

(715) 468 - 4700

Dr. Natalie A. Chrastil [email protected]

(307) 777 - 7181

Mr. Dale A. Stalder Chief of Police Laramie Police Department [email protected]

(307) 721 - 3552

CJIS AUDIT UNIT CONTACT INFORMATION NCIC AUDITS:

Shellie Williams [email protected]

(304) 625–2621

IAFIS AUDITS:

Timothy Neal [email protected]

(304) 625 – 2637

N-DEx AUDITS:

Susan Gilbert-Kiger [email protected]

(304) 625 – 2788

IT SECURITY AUDITS:

Chris Wright – CJ Audits [email protected]

(304) 625–2933

Derek Holbert – Special Audits [email protected]

(304) 625–5479

UCR / QAR AUDITS:

Joyce Humphrey [email protected]

(304) 625–2920

NICS AUDITS:

Randall Wickline [email protected]

(304) 625–4876

CJIS ISO CONTACT INFORMATION George A. White [email protected]

(304) 625 - 5849

Jeffrey B. Campbell [email protected]

(304) 625 – 4961

Ronald M. Buchanan [email protected]

(304) 625 - 4835

Stephen C. Exley [email protected]

(304) 625 - 2670