Orange County NC Website
Browse       Search
Orange County, NC <br /> <br />On-Premise OnCall Dispatch Implementation <br />Statement of Work 124 <br />Attachment L-1 – CJIS Security Addendum <br />FEDERAL BUREAU OF INVESTIGATION <br />CRIMINAL JUSTICE INFORMATION SERVICES <br />SECURITY ADDENDUM <br />The goal of this document is to augment the CJIS Security Policy to ensure adequate security is provided <br />for criminal justice systems while (1) under the control or management of a private entity or (2) <br />connectivity to FBI CJIS Systems has been provided to a private entity (contractor). Adequate security is <br />defined in Office of Management and Budget Circular A-130 as “security commensurate with the risk and <br />magnitude of harm resulting from the loss, misuse, or unauthorized access to or modification of <br />information.” <br />The intent of this Security Addendum is to require that the Contractor maintain a security program <br />consistent with federal and state laws, regulations, and standards (including the CJIS Security Policy in <br />effect when the contract is executed), as well as with policies and standards established by the Criminal <br />Justice Information Services (CJIS) Advisory Policy Board (APB). <br />This Security Addendum identifies the duties and responsibilities with respect to the installation and <br />maintenance of adequate internal controls within the contractual relationship so that the security and <br />integrity of the FBI's information resources are not compromised. The security program shall include <br />consideration of personnel security, site security, system security, and data security, and technical <br />security. <br />The provisions of this Security Addendum apply to all personnel, systems, networks and support facilities <br />supporting and/or acting on behalf of the government agency. <br />1.00 Definitions <br />1.01 Contracting Government Agency (CGA) - the government agency, whether a Criminal Justice <br />Agency or a Noncriminal Justice Agency, which enters into an agreement with a private contractor subject <br />to this Security Addendum. <br />1.02 Contractor - a private business, organization or individual which has entered into an agreement for <br />the administration of criminal justice with a Criminal Justice Agency or a Noncriminal Justice Agency. <br />2.00 Responsibilities of the Contracting Government Agency. <br />2.01 The CGA will ensure that each Contractor employee receives a copy of the Security Addendum and <br />the CJIS Security Policy and executes an acknowledgment of such receipt and the contents of the <br />Security Addendum. The signed acknowledgments shall remain in the possession of the CGA and <br />available for audit purposes. The acknowledgement may be signed by hand or via digital signature (see <br />glossary for definition of digital signature). <br />3.00 Responsibilities of the Contractor. <br />3.01 The Contractor will maintain a security program consistent with federal and state laws, regulations, <br />and standards (including the CJIS Security Policy in effect when the contract is executed and all <br />Docusign Envelope ID: 463E937D-8F02-4D22-9EEA-B2B50627D9E0Docusign Envelope ID: DE681D27-7D55-4FB6-8C51-9394D26FBC9E