1 Del. Admin. Code § 1301-6.0

Current through Register Vol. 28, No. 5, November 1, 2024

Section 1301-6.0 - Responsibilities of Authorized Agencies

6.1 Authorized Agencies shall obtain a fingerprint based criminal history report from SBI and FBI for each Authorized User.

6.2 Authorized Agencies must ensure all Authorized Users within their agency annually acknowledge that they have read and understand these regulations. The Authorized Agency shall be responsible for returning a signed acknowledgment for each Authorized User to the DELJIS Security Manager.

6.3 Authorized Agencies must ensure that Authorized Users within their agency comply with Chapters 85 and 86 of Title 11 of the Delaware Code and these regulations.

6.4 The Authorized Agency head or designee is responsible for ensuring all Authorized Users attend the DELJIS training commensurate to each Authorized User's employment position, as set forth by DELJIS.

6.5 The Authorized Agency head or designee shall certify for completeness and accuracy a list of Authorized Users provided annually by DELJIS to the agency head. The list shall be certified as is, or corrected to delete, add, or change Authorized Users and returned to DELJIS within 60 days of receipt of said list by the agency head or designee.

6.6 Authorized Agencies are responsible for notifying the DELJIS Security Manager or designee immediately or as soon as practical upon an Authorized User's departure (transfer, termination, resignation, or retirement) from the agency.

6.7 Authorized Agencies are responsible for notifying the DELJIS Security Manager or designee immediately or as soon as practical upon an Authorized User's administrative leave from the agency, if the administrative leave exceeds 24 hours or results in loss of agency privileges, identification credentials, or departmental weapon.

6.8 Authorized Agencies are responsible for notifying the DELJIS Security Manager or designee immediately or as soon as practical upon an Authorized User's arrest, charge, or conviction of a criminal violation or offense in any jurisdiction immediately upon receiving notification of the same.

6.9 Authorized Agencies are responsible for notifying the DELJIS Security Manager or designee immediately or as soon as practical upon discovery of an Authorized User's Improper Access or Breach.

6.10 Authorized Agencies are required to follow the Records Retention and Destruction procedures provided in Section 15.0 of this regulation, that require CJIS, NCIC, NICS, or Triple-I information be disposed of securely. Whether the information is in a physical form (printout) or an electronic form (hard drive, flash drive, etc.) the information must be disposed of in such a way that unauthorized people cannot retrieve it. For most agencies, this means ensuring printed information is shredded onsite by the user.

6.11 The DELJIS Security Manager or designee will conduct an Authorized Agency site inspection when required to ensure physical site suitability and security.

6.12 Authorized Agencies must maintain secondary dissemination logs consistent with 11 Del.C. § 8513(e).

6.13 Authorized Agencies are responsible to ensure the security, integrity, and confidentiality of the information contained within CJIS, even when they engage with a third-party vendor to provide software, products, or services relating to CJI.

6.14 Authorized Agencies must ensure that any third-party computer system, service, product or deliverable interfacing with DELJIS or maintaining CJI complies with the standards and policies promulgated by DELJIS published at http://deljis.delaware.gov/policies, and as modified from time to time by DELJIS.

6.14.1 Authorized Agencies must require all Contractors interfacing with DELJIS or maintaining CJI to sign a CJIS Security Addendum.

6.14.2 A signed copy of the CJIS Security Addendum must be sent to DELJIS at DELJIS_infosec@delaware.gov.

6.15 If any computer system, service, product, or deliverable interfacing with DELJIS or maintaining CJI does not conform to DELJIS standards and policies, the Authorized Agency shall either:

6.15.1 Replace it with a conforming equivalent; or

6.15.2 Modify it to conform to DELJIS standards and policies.

1 Del. Admin. Code § 1301-6.0

25 DE Reg. 270 (9/1/2021)
26 DE Reg. 388 (11/1/2022) (Final)