LawEnforcementInformationExchange LInXRegionsGovernanceMeeting

2012IACPLEIMConference Indianapolis,IN Monday,May21,2012 9:00am 11:00amEST

May 2012

Slide

Agenda
OpeningRemarks
ChristopherCote,NavalCriminalInvestigativeService AssistantDirector,InformationServices DeputyChiefEddieReyes,AlexandriaPoliceDepartment, NCRLInXChair

Review R i and dDiscussion Di i It Items

AdoptionofLInXtoLInXMOUAddendum ExpansionEffortsofLInXRegions NCISUpdate InformationSharingEffortswithFederalPartners SustainmentofLInX
Slide 2

LInXRegions Map

Northwest Northeast

Southern California Rio Grande

NCR Virginia North Carolina Gulf Coast Southeast

Hawaii
Slide 3

LInXRegionsSummary

*Trained Active Users = Non disabled, non deleted user accounts that have logged into LInX at least once.

Slide

WhatsInLInX? LInXRecordTypes
Over 380 Million Event Records Almost 38 Million Mugshots

Slide

LInXExpansion Discussion
Adoption Ad ti of fLI LInX Xt toLI LInX XMOUAdd Addendum d Update U d t IndividualLInXRegionsUpdates
Including I l di connections i with i hother h Regional R i lSystems S IncludingTrainingEffortsandGovernanceChanges

StrategyforAgencyRMS/CADchanges/upgrades
StandardCostsforNewAgenciesComingOnboard?
GSASchedule? StateSchedules?

Slide

NCISUpdate
NorthEast N thE tLInX LI XP Program(NELInX) LI X) DDEx
NCIS AirForceOSI ArmyCID Others

ConnectionwithNDExandDHS

Slide

Overall Site Status

Priority System LInX LInX NW (Pilot) LInX SOCAL LInX DDex Description Law Enforcement Information Exchange Washington, Oregon, Idaho, Alaska (Seattle, WA Region) Southern California lif i Department of Defense (Army CID, AFOSI, NCIS) OneDOJ N-DEx Status Connect Data Submission Notes Type of Connection Portal Access/ OneWay LEXS SR pending Portal Access/ OneWay LEXS SR pending Pending CJIS ISO Security Assessment CSO has requested CJIS ISO security approval in writing MOU Integration

Completed p
Issues

Yes

Yes

Completed

Yes

Yes

Training work in progress

Yes

Yes

Completed

No

No

Training work in progress

Yes

Yes

6/2012

No

No

Training work in progress Draft MOU provided, Integration di discussed, d need d written itt approval lf from CJIS ISO to provide to VA ISO. Training work in progress

LInX VA

Virginia

Yes

8/2012

Completed

Draft

Draft

LInX NCR

National Capitol Region - District of Columbia, Northern Virginia, Maryland Hawaii

Yes

9/2012

9/2012

CSOs have NOT approved

Draft

Draft

Draft MOU provided, Integration discussed, No CSO approval yet, discussed yet working on CSOs. Training work in progress

LInX HI

Yes

8/2012

8/2012

Pending CJIS ISO Security A Assessment

Yes, not signed yet

Yes

MOU drafted awaiting signatures, CSO has approved. Training work in progress

Note: If any items must be addressed and voted on at governance board level, schedules will be pushed our for 12 months. Slide 8

Note: Priority for HI and GC is actually #2 due to readiness of all parties

Overall Site Status

Priority Type LInX Description Law Enforcement Information Exchange Greater Corpus Christi Texas Florida Panhandle and Southern Georgia (Jacksonville, FL Region) New Mexico and Western Texas OneDOJ N-DEx Status Connect Data Submission Notes Type of Connection MOU Integration

Completed p
Issues

LInX GC

Yes

8/2012

8/2012

Pending CJIS ISO Security Assessment Pending CJIS ISO Security Assessment/CSO has NOT approved Pending CJIS ISO Security Assessment/CSO has NOT approved Pending CJIS ISO Security Assessment/CSO has NOT approved Pending CJIS ISO Security Assessment/CSO has NOT approved

Yes, not signed yet

Draft

MOU drafted awaiting signatures. Training work in progress

LInX SE

Yes

12/2012

12/2012

Draft

Draft

MOU drafted by FDLE, not signed. CSO will not approve w/out state security audit. Training work in progress

LInX RG

No

2013

2013

No

No

Need face to face meeting to outline issues. issues Training work in progress

LInX NC

North Carolina

No

2013

2013

No

No

Need formal audit policy by LInX, No CSO approval Need face to face to outline issues approval. issues. Training work in progress

LInX NE

Connecticut

No

2013

2013

No

No

Need face to face meeting to outline issues. Training work in progress

Note: If any items must be addressed and voted on at governance board level, schedules will be pushed our for 12 months. Slide 9

Note: Priority for HI and GC is actually #2 due to readiness of all parties

CJIS Security Review

CJISSecurityPolicy Comments Requirement& L ti Location Nomorethanfive LInXacceptssixattempts. consecutiveinvalid accessattempts (5.5.3(1)) Passwordsshallnot beidenticaltothe previousten passwords (5.6.2.1(5)) Advanced authentication (5.6.2.2.1) LInXequalspriorsixpasswords. Functional/Pol Timeline(Estimated) icy/ orfuture d fi i deficiency PMO 7/2012 TechnicalFix Solution Changefromsixtofiveattemptswillbeincludedin v4.1.2July

PMO TechnicalFix

7/2012

Changefromsixtotenpriorpasswordswillbeincluded inv4.1.2July

PMOcontractorstaskedtodevelop riskbasedsolution.Alreadycollect dataandneedtodevelopsolution. WillcoordinatewithCJISISO.

PMO TechnicalFix

7/2012

CJIScompliantriskbasedauthenticationwillbeincluded inv4.1.2inJuly

Nopersonally Governanceboard/agencytodevelop owneddevicesused policyforpersonallyowneddevices. toaccessCJISdata (5.5.6.1)

Policy

Unknown

Coordinatew/regional LInX ProgramManagersandLInX PMO.SomeofthisworkisalreadyunderwayfortheSE LInX siteinJacksonvilleandcanbereusedforother regions.

Slide 10

CJIS Security Review

CJISSecurityPolicy Requirement& Location WirelessAccess Needtoestablish usagerestrictions and implementation andauthorize, monitor,control wirelessaccessto system(5.5.7) Securityalertsand advisories(5.10.4.5) Comments Functional/Pol icy/orfuture deficiency Policy Timeline(Estimated) Solution Optionforgovernanceboard/agency todeveloppolicyforpersonally owneddevices Unknown Coordinatew/regional LInX ProgramManagersandLInX PMO.SomeofthisworkisalreadyunderwayfortheSE LInX siteinJacksonvilleandcanbereusedforother regions.

PMOwillpushsecurityalertsto governanceboards/agencies.

Policyand technical fix

Unknown

This mightbeincludedintheMOUsbetweenLInX and CSOs,orpushedouttothelocalagenciesbyLInX ina report. p NDEx PMOlookingatcreationofCBTtosatisfy requirementforNDEx ONLY.CurrentNCIC/IIIcertified usershavemettherequirementwiththattraining.

Biennialsecurity awarenesstraining (5.2)

LInXwillincorporatebiennialtraining ofCJISSecurityPolicyrequiredtopics. PMOinvestigatingdeliverymethods.

Policyand technicalfix

6 12months

Auditlogsweekly (5.4.3(2))

Thiswillbechallenging.Consideration giventoPMOprovidingtailored reportstoagenciestoenable bl l log reviews.Thisisa2013CSP requirement.

Policyfor future d f deficiency required

2013

Notanimmediateissuesincethisisa2013requirement, LInX lookingatpossiblesolutionssuchasareportthatcan b pushed be h doutb byLInX PMOtolocal l lagencies

Slide 11

Federal Records in the System

( of May 2, 2012)
Component Source Record Description Data Volume

ATF BOP

NFORCE ITSLOG ITSLIST SENTRY

Subject S bj of fI Interest Open & Closed cases Federal inmate authorized call logs Federal Federal inmate authorized call lists Federal inmate biographical & activity records through out incarceration Subjects of interest w/phone numbers, l ti locations and d associates i t Open cases Open and closed case records, including narratives Subjects of interest with phone numbers, locations and associates Open and Closed cases Case C se Records eco ds Images and Booking data

98 845 98,845 11,174,356 2 462 140 2,462,140 1,633,703 3,285,845

DEA

NADDIS

FBI

FBI ECF Data FBI UNI Data

192,410 479,860

U.S. Marshal s Service Se v ce JABS - Joint Automated Booking System

WIN W JABS

445,778 ,77 4,000,795

*Over 23,300,000 records currently in N-DEx and increasing daily

Federated N-DEx Queries

( of May 2, 2012)
Component Source
Traveler Enforcement Compliance System (TECS) database

Record Description
TECS includes subjects handled by both Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP) during the past 10 years. It includes information derived from the agencies following business activities: ICE investigative case management; information reporting p g and dissemination; CBP processing p g passengers at air, land, and sea ports of entry; and maintaining a watch list for DHS agencies ENFORCE is the front-end software application used to access the Enforcement Integrated Database, a DHS shared common database repository for ICE, CBP, and US Citizenship and Immigration Services, which is used to capture and maintain information related to the arrest, booking, and removal of persons encountered during immigration and criminal law enforcement investigations and operations. Information from these systems help the ENFORCE user gain a comprehensive look at apprehension booking, alien detention, and alien removal. It also includes biographic data on the subjects along with their photos. Data include: 162,525 records on wanted persons, persons with criminal histories, persons involved in criminal activity, and missing persons; 7,179,177 stolen vehicle records; and 32,085,311 stolen/lost travel documents such as visas, passports and various types of identity cards.

Total Data Volume

Department of Homeland Security - DHS

38 million records

Enforcement Case Tracking System (ENFORCE)

Information from the International Criminal Police Organization INTERPOL (USNCB Wash)

N-DEx users (from the N-DEx portal) will have access to secure communications networks and databases supplied by INTERPOLs member countries.

35 million records

Slide 13

N-Dex Portal Capabilities

NDExPortal
LInXUserwillhaveaccessfromtheLInXinterfaceusing logoncredentials Simplesearchincludesnarrativedata Targetedsearchincludesidentifiers(i.evehicles, locations person) locations, Subscription/notificationcapabilities Collaborationcapabilities p Analytical(Geo/LinkViz)capabilities AuditReportcapabilities Federatedsearchcapabilities(DHSandINTERPOL USNCBWash)
Slide 14

N-DEx LEXS Capabilities

LEXSSR
MachinetomachinequeryLInXsearchcriteria automaticallypassedtoNDExandreturnedinthe LI Xinterface LInX i t f Providesuserwithintegratedresultsfromdata elements Returnsonlystructureddata Subscription/notificationcapabilityinFY2012 IntegratedPersonEntityView(IPEV)return capabilitiesinFY2012/13 LEXS4 4.0 0capabilityinFY2013
Slide 15

LInXSustainment NCISReview
NCIS
DefensefundingcoversLInXRegionsacrossthe countrywith i hongoing i maintenance i LInXRemainsaProgramofRecordforNCISandthe USN
LInXremainsfundedbutthereisuncertaintyfromyeartoyear Sequestration q couldmeanadraconiancutforFY13andFY14 RegionsshouldplanandimplementalternativefundingiftheNCIS budgetcannotsustainLInX NCR,VA,NC,SE,andGChaveallutilizedsomegrantfundingfor expansion,capabilities,andmaintenance
Slide 16

LInXSustainment NCISReview
NCIS (cont.) ( )
CurrentcontractcontinuesthroughSeptember2015
Taskingunderwaytodeterminebestchoicesfor consolidationofservers,circuits,andlicensestosaveon annualcosts NCISemphasisonDDExandintegrating13DoDagenciesas wellasmodernizingtheNCISRMS

Slide 17

LInXSustainment NCISReview
NCIS (cont.) ( )
Otherwaystosaveoncosts
Reductionofanalytictoollicenses eg.ERSIMapping,i2 IXV
Moreofameat meatandpotato potato approachtoprioritizethebasissearch/ retrievalcapabilities

AnotherpushtorequireNIEMscompliantdatafeedsdue tolowermaintenancecosts HostingofserversbyoneLEA eg.AlexandriaPDhas allottedspace p forLInXServers

Slide 18

LInXSustainment Discussion
MaintenanceofLInXRegions g Agency g Feeds
AnnualMaintenanceCosts WhatwouldthecostsbeifLInXRegionsneeded toassumeresponsibilityoftheirRegionssustainmentcosts HaveanyRegionsbegundiscussingfuturesustainmentoftheirLInXRegional Program

ConsolidationEfforts/Redundancy Security
RulesofusechangesforCJISSecurityPolicy&CSOs(SELInXExample)

Governance&GovernanceSupport
Training Standardizingacrossregions Audits Usageauditsvssystem/technicalaudits ShouldSubCommitteesbecreatedtodiscussandproviderecommendations
Slide 19

LInXRegionsMeetings
Next N tM Meeting ti September S t b /O October t b 2012
LInXRegionsMeetingatIACPConferenceinSanDiego,CA
(September29 October3,2012)

May/June2013Meeting
IACPLEIM SuggestionsforChanges?

Slide 20