07-078 - Tukwila et al - RAIN (Regional Automated Information Network) for Police Data Sharing

Browse Search

APPENDIX B RAIN Security System Security Roles and Responsibilities Policy. Policy. Personnel Background Screening Background. The Chief of Police for each participating agency in RAIN is responsible for establishing appropnate RAIN security control. Security control is defined as the ability to set, maintain, and enforce• 1 Standards for the selection, supervision, and termination of system access, and 2 Policy governing the operation of computers, access devices, circuits, hubs, router, firewalls, and other components that make up and support a telecommunications network and related RAIN system used to process, store, or transmit law enforcement and investigative information, guaranteeing the pnonty, integrity, and availability of service needed by the criminal justice community The RAIN Governance Board is responsible for developing and maintaining the RAIN secunty policy The RAIN Governance Board is not responsible for overseeing the security of participating agency systems, other then to act as a resource for each agency and to make decisions relating to apparent violations of the RAIN Security Policy, when they become known. Each participating agency in RAIN is member of an information shanng network that requires a security clearance for all who access to the system. State and Federal Laws prohibit or restrict public access to and dissemination of Database Records. Access to these Database Records is therefore controlled by security authorizations. RAIN wishes to protect the security and proper use of the Database Records by performing Secunty Investigations on non Department employees or contractors who have or seek to have access to Database Records. RCW 10 97 050(3) provides that criminal justice agencies can access cnmmal history record information that includes non conviction data for any purpose associated with the administration of cnmmal justice. RCW 43 89 010 establishes the Central Computerized Enforcement Services System (ACCESS) and limits its use exclusively to the official business of the state, and the official business of any city, county, city and county, or other public agency The Washington State Supreme Court has recognized that a law enforcement agency has a legitimate interest in ensuring a high level of trustworthiness and personal integrity in those individuals who would have access to Database Records due to the sensitive information accessible from those records and the unique potential dangers inherent to compromised information during ongoing cnmmal investigations and other law enforcement activities. RAIN ILA 2007