LInX Regions Governance Meeting Slides_May 21_FINAL

8/13/2019 LInX Regions Governance Meeting Slides_May 21_FINAL

1/20

LawEnforcementInformationExchange

2012IACPLEIMConference

Indianapolis,IN

Monday,May21,2012

9:00 am 11:00 am EST

SlideMay 2012 1


2/20

Agenda

Christopher

Cote,

Naval

Criminal

Investigative

Service

AssistantDirector,InformationServices

DeputyChiefEddieReyes,AlexandriaPoliceDepartment,

NCR

LInX

Chairev ewan scuss on tems

AdoptionofLInXtoLInXMOUAddendum

NCISUpdate

Sustainment

of

LInX2Slide


3/20

LInXRegionsLInXRegionsMapMap

Northwest

Northeast

SouthernCalifornia

North

Virginia

NCR

Gulf Coast Southeast

Carolina

3Slide

Hawaii


4/20

LInXRegionsSummary

4Slide 4Slide

*Trained Active Users = Non disabled, non deleted user accounts that have logged into LInX at least once.


5/20

WhatsInLInX?LInXRecordTypes

Over 380

Million

Event

Records

38 Million

Mugshots

5Slide


6/20

LInXExpansion Discussion

op ono n o n en um p a e

IndividualLInXRegionsUpdates

Inc u ngconnect onsw t ot erReg ona ystems

IncludingTrainingEffortsandGovernanceChanges

StandardCostsforNewAgenciesComingOnboard?

GSASchedule?

StateSchedules?

6Slide


7/20

NCISUpdate

or as n rogram n

DDEx

N I

AirForceOSI

Others

7Slide


8/20

Com letedPriority System Description OneDOJ N-DEx Status Notes MOU Integration Issues

LInX

Law

Enforcement

InformationConnect

Data

Submission

Type of

Connection

Exchange

LInX NW(Pilot)

Washington,

Oregon, Idaho,Alaska (Seattle,

WA Region)

Yes Yes Completed Portal Access/ -OneWay LEXS

SR pending

Yes Yes Training work in progress

LInX SouthernPortal Access/ -

SOCAL California

SR pending

LInX

DDex

Department of

Defense (Army

CID, AFOSI,

NCIS)

Yes Yes 6/2012

Pending CJIS ISO

Security

Assessment

No No Training work in progress

CSO hasDraft MOU provided, Integration

1 LInX VA Virginia Yes 8/2012 Completed

requested CJIS

ISO security

approval in

writing

Draft Draft

scusse , nee wr en approva rom

ISO to provide to VA ISO. Training work

in progress

National Capitol

Region - DistrictDraft MOU provided, Integration

2LInX

NCR

of Columbia,

Northern

Virginia,

Maryland

Yes 9/2012 9/2012CSOs have NOT

approved Draft Draft

, ,

on CSOs. Training work in progress

3 LInX HI Hawaii Yes 8/2012 8/2012

Pending CJIS ISO

Security

Yes,

not

si nedYes

MOU drafted awaiting signatures, CSO has

a roved. Trainin work in ro ressssessment

yet

Note: Priori ty for HI and GC is actually #2 due to

readiness of all parties

Note: If any items must be addressed and voted on at governance

board level, schedules will be pushed our for 12 months.

Slide 8


9/20

Com letedPriority Type Description OneDOJ N-DEx Status Notes MOU Integration Issues

LInX

Law

Enforcement

InformationConnect

Data

Submission

Type of

Connection

Exchange

4LInX

GC

Greater Corpus

Christi TexasYes 8/2012 8/2012

Pending CJIS

ISO Security

Assessment

Yes, not

signed yetDraft

MOU drafted awaiting signatures. Trainingwork in progress

5LInX

SE

Panhandle and

Southern

Georgia

(Jacksonville,

FL Region)

Yes 12/2012 12/2012

Pending CJIS

ISO Security

Assessment/CSO

has NOT

approved

Draft Draft

MOU drafted by FDLE, not signed. CSO will

not approve w/out state security audit. Training

work in progress

Pending CJIS

6LInX

RG

New Mexico

and Western

Texas

No 2013 2013

ISO Security

Assessment/CSO

has NOT

approved

No No

.

Training work in progress

LInX

Pending CJIS

ISO Security Need formal audit policy by LInX, No CSO

NC

has NOTapproved

. .


8LInX

NEConnecticut No 2013 2013

Pending CJIS

ISO Security

Assessment/CSO

has NOT

No NoNeed face to face meeting to outline issues.


approved

Note: Priori ty for HI and GC is actually #2 due to

readiness of all parties

Note: If any items must be addressed and voted on at governance

board level, schedules will be pushed our for 12 months.

Slide 9


10/20

CJISSecurityPolicy

Requirement&

Comments Functional/Pol

icy/ orfuture

Timeline(Estimated) Solution

oca on e c ency

Nomorethanfive

consecutiveinvalid

accessattempts

(5.5.3(1))

LInXacceptssixattempts. PMO

TechnicalFix

7/2012 Changefromsixtofiveattemptswillbeincludedin

v4.1.2July

Passwordsshallnot

beidenticaltothe

previousten

passwords

(5.6.2.1(5))

LInXequalspriorsixpasswords. PMO

TechnicalFix

7/2012 Changefromsixtotenpriorpasswordswillbeincluded

inv4.1.2July

authentication

(5.6.2.2.1)

riskbasedsolution. Alreadycollect

dataandneedtodevelopsolution.

WillcoordinatewithCJISISO.

TechnicalFix

inv4.1.2inJuly

Nopersonally Governanceboard/agencytodevelop Policy Unknown Coordinatew/regional LInX ProgramManagersandLInX

owned

devices

used

toaccessCJISdata

(5.5.6.1)

policy

for

personally

owned

devices.

PMO.

Some

of

this

work

is

already

underway

for

the

SE

LInX siteinJacksonvilleandcanbereusedforother

regions.

Slide 10


11/20

CJISSecurityPolicy

Requirement&

Location

Comments Functional/Pol

icy/orfuture

deficiency

Timeline(Estimated) Solution

Needtoestablish

usagerestrictions

and

implementation

andauthorize,

todeveloppolicyforpersonally

owneddevices

PMO. SomeofthisworkisalreadyunderwayfortheSE

LInX sitein

Jacksonville

and

can

be

reused

for

other

regions.

monitor,control

wirelessaccessto

system(5.5.7)

Securityalertsand

advisories(5.10.4.5)

PMOwillpushsecurityalertsto

governanceboards/agencies.

Policyand

technical fix

Unknown This mightbeincludedintheMOUsbetweenLInX and

CSOs,or

pushed

out

to

the

local

agencies

by

LInX in

a

re ort.

Biennialsecurity

awarenesstraining

(5.2)

LInXwillincorporatebiennialtraining

ofCJISSecurityPolicyrequiredtopics.

PMOinvestigatingdeliverymethods.

Policyand

technicalfix

6 12months NDEx PMOlookingatcreationofCBTtosatisfy

requirementforNDEx ONLY. CurrentNCIC/IIIcertified

usershavemettherequirementwiththattraining.

Auditlogsweekly

(5.4.3(2))

Thiswillbechallenging. Consideration

giventoPMOprovidingtailored

Policyfor

future

2013 Notanimmediateissuesincethisisa2013requirement,

LInX lookingatpossiblesolutionssuchasareportthatcan

reportstoagenciestoenablelog

reviews. Thisisa2013CSP

requirement.

deficiency

required

bepushedoutbyLInX PMOtolocalagencies

Slide 11


12/20

Federal Records in the SystemComponent Source Record Description Data Volume

( of May 2, 2012)

u ect o nterest

Open & Closed cases

,

BOP ITSLOG Federal inmate authorized call logs 11,174,356

, ,

SENTRY Federal inmate biographical & activity records

through out incarceration

1,633,703

DEA NADDIS Subjects of interest w/phone numbers, 3,285,845

oca ons an assoc a es

Open cases

FBI FBI ECF Data Open and closed case records, including

narratives

192,410

FBI UNI Data Subjects of interest with phone numbers,locations and associates

Open and Closed cases

479,860

U.S. Marshal Service WIN Case Records 445 778

JABS - Joint Automated

Booking System

JABS Images and Booking data 4,000,795

*Over 23,300,000 records currently in N-DEx and increasing daily


13/20

Federated N-DEx QueriesComponent Source Record Description Total Data

Volume

( of May 2, 2012)

Department of Homeland

Security - DHS

Traveler Enforcement

ComplianceSystem (TECS)

database

TECS includes subjects handled by both Immigration

and Customs Enforcement (ICE) and Customs andBorder Protection (CBP) during the past 10 years. It

includes information derived from the agencies following

business activities: ICE investigative case management;

information reporting and dissemination; CBP processing

38 million

records

passengers at air, land, and sea ports of entry; and maintaining a

watch list for DHS agencies

Enforcement Case

Tracking System

(ENFORCE)

ENFORCE is the front-end software application used to access

the Enforcement Integrated Database, a DHS shared common

database repository for ICE, CBP, and US Citizenship and

Immi ration Services which is used to ca ture and maintain

information related to the arrest, booking, and removal of persons

encountered during immigration and criminal law enforcement

investigations and operations. Information from

these systems help the ENFORCE user gain a comprehensive look

at apprehension booking, alien detention, and alien removal. It

also includes biographic data on the subjects along with their

photos.

Information from the

International Criminal

Police Organization

N-DEx users (from the

N-DEx portal) will

have access to secure

communications

Data include: 162,525 records on wanted persons, persons with

criminal histories, persons involved in criminal activity, and

missing persons; 7,179,177 stolen vehicle records; and 32,085,311

stolen/lost travel documents such as visas, passports and various

types of identity cards.

35 million

records

Wash) and databases suppliedby INTERPOLs

member countries.

Slide 13


14/20

N-Dex Portal Capabilities

NDExPortal

LInXUser

will

have

access

from

the

LInX

interface

using

logoncredentials

Simplesearchincludesnarrativedata

Targetedsearchincludesidentifiers(i.evehicles,

,

Subscription/notificationcapabilities

Collaborationcapabilities

Analytical(Geo/Link

Viz)

capabilities

AuditReportcapabilities

Federatedsearchcapabilities(DHSandINTERPOL

USNCBWash)

Slide 14


15/20

N-DEx LEXS CapabilitiesN-DEx LEXS Capabilities

LEXSSR

Machineto

machine

query

LInX

search

criteria

automaticallypassedtoNDExandreturnedinthe

n n er ace

Providesuserwithintegratedresultsfromdata

elements

Returnsonlystructureddata

Subscription/notificationcapabilityinFY2012

IntegratedPerson

Entity

View

(IPEV)

return

capabilitiesinFY2012/13

. y

Slide 15


16/20

LInXSustainment NCISReview

DefensefundingcoversLInXRegionsacrossthe

countryw t ongo ngma ntenance

LInX

Remains

a

Program

of

Record

for

NCIS

and

the

LInXremainsfundedbutthereisuncertaintyfromyeartoyear

SequestrationcouldmeanadraconiancutforFY13andFY14

Regions

should

plan

and

implement

alternative

funding

if

the

NCIS

budgetcannotsustainLInX

expansion,capabilities,andmaintenance

16Slide


17/20


cont.

CurrentcontractcontinuesthroughSeptember2015

Taskingunderwaytodeterminebestchoicesfor

consolidationofservers,circuits,andlicensestosaveon

annualcosts

NCISemphasisonDDExandintegrating13DoDagenciesas

wellasmodernizingtheNCISRMS

17Slide


18/20


cont.

Otherwaystosaveoncosts

Reductionofanalytictoollicenses eg.ERSIMapping,i2

IXV

More of a meat and otato a roach to rioritize the basis searchretrievalcapabilities

AnotherpushtorequireNIEMscompliantdatafeedsdue

HostingofserversbyoneLEA eg.AlexandriaPDhas

allottedspaceforLInXServers

18Slide


19/20

LInXSustainment DiscussionMaintenanceofLInXRegionsAgencyFeeds

AnnualMaintenanceCostsWhatwouldthecostsbeifLInXRegionsneeded

toassumeresponsibilityoftheirRegionssustainmentcosts

Program

ConsolidationEfforts

/Redundancy

Security RulesofusechangesforCJISSecurityPolicy&CSOs(SELInXExample)

Governance&

Governance

Support

Training Standardizingacrossregions

ShouldSubCommitteesbecreatedtodiscussandproviderecommendations

19Slide


20/20

LInXRegionsMeetings

ex ee ng ep em er c o er

LInXRegionsMeetingatIACPConferenceinSanDiego,CA(September29 October3,2012)

May/June

2013

Meeting

IACPLEIM

SuggestionsforChanges?

20Slide

LInX Regions Governance Meeting Slides_May 21_FINAL

Documents

Transcript of LInX Regions Governance Meeting Slides_May 21_FINAL