204 COMPUTER USAGE POLICY

VILLAGE OF EL PORTAL POLICE DEPARTMENT DEPARTMENTAL ORDERS CHAPTEREFFECTIVE DATE REVISEDCHIEF OF POLICE 204 5/1/2020Reviewed & Revised December 2020DAVID MAGNUSSON TITLE: COMPUTER ACESS AND INTERNET USAGE 1PURPOSE: To establish guidelines concerning the proper use of department information systems, Intranet, Internet connection, and Criminal Justice Information Services (CJIS ) in compliance with the FBI CJIS Security Policy and the FDLE User Agreement requirements. SCOPE: This order applies to all El Portal Police Department members. POLICY: To ensure effective and lawful use of police department information systems, intranet, Internet connection, and Criminal Justice Information Services. To ensure that access and use of CJIS is in conformance with CJIS User Agreements and other applicable user agreements. PROCEDURE: A.COMPUTER UTILIZATION AND ACCOUNT MANAGEMENT: 1.Department information systems, intranet, Internet connection, and Criminal Justice Information Services shall only be accessed and utilized by authorized department members for official police department business. 2.The use of department information systems, intranet, Internet connection and Criminal Justice Information Services is a privilege and not a right. Therefore, their use can be revoked at any time at the discretion of the appropriate Section Command Staff Member. 3.Computer usage and activity, including email and messaging, is subject to be monitored, audited, and recorded at any time. It may also be public record. Use of the system indicates consent to monitoring and recording. 4.Department information systems are configured to ensure that only authorized personnel can add, change, or remove component devices, network connections, and remove or alter programs. VILLAGE OF EL PORTAL POLICE DEPARTMENT DEPARTMENTAL ORDERS CHAPTEREFFECTIVE DATE REVISEDCHIEF OF POLICE 204 5/1/2020Reviewed & Revised December 2020DAVID MAGNUSSON TITLE: COMPUTER ACESS AND INTERNET USAGE 25.Department information systems are configured to prevent multiple concurrent active sessions for one user Identification for all applications including those applications accessing Criminal Justice Information. 6.Upon completion of appropriate state and national fingerprint-based records check, the Agency will notify the Local Agency Security Officer (LASO) designee and provide the following information regarding the user: a.Applicant full name b.Applicant date of birth c.Applicant social security number d.Applicant start date e.Applicant assigned MDT (laptop) f.Applicant system(s) access 7.Upon completion of paperwork, the user will be issued Agency equipment delegated to the users’ position within the Agency. Equipment includes, but is not limited to, Agency laptop, MiFi device for wireless access, keys, identification badge and authentication token (grid card) and will sign a receipt for all items. Subsequent equipment changes, deletions, enhancements will be documented via Agency equipment receipt form and approved through Agency chain of command. 8.The LASO designee will contact an Information Technology team member to create and establish a Windows Domain account for the applicant. Each account is uniquely identified by a username derived from the user’s employee identification number. All accounts are created to ensure a unique username for every individual. 9.The Domain account will be assigned a temporary password and will be set up to require the user to create a new password upon activating the first session. The password for the account must adhere to the Agency password requirements outlined in the Authentication Strategy Policy. All department members accessing department computer systems shall utilize a separate and distinct password. Passwords shall: VILLAGE OF EL PORTAL POLICE DEPARTMENT DEPARTMENTAL ORDERS CHAPTEREFFECTIVE DATE REVISEDCHIEF OF POLICE 204 5/1/2020Reviewed & Revised December 2020DAVID MAGNUSSON TITLE: COMPUTER ACESS AND INTERNET USAGE 3a.Be a minimum length of eight (8) characters. b.Not be a dictionary word or proper name. c.Not be the same as the User ID. d.Expire within a maximum of 90 calendar days. e.Not be identical to the previous twelve (12) passwords. f.Passwords shall not be shared with anyone. g.Not be transmitted in the clear outside the secure location. h.Not be displayed when entered. 10.The LASO will meet with the new user upon starting to ensure proper access to each information system is granted. 11.In the event of promotion, demotion, suspension, leave or voluntary or involuntary termination, and or reinstatement the supervisor will immediately notify the LASO of the change of status to ensure appropriate access changes are made to systems and applications. a.Promotion/Demotion - Supervisor will notify LASO of change of status and change of authority level. The LASO will update all systems and applications as necessary to evolve with the current status of employment and will document these changes in the active directory. b.Suspension/Leave - Supervisor will notify LASO of the temporary change to the users’ account. The LASO will temporarily deactivate the account on each system and application. The Supervisor will collect all agency equipment from the user and document the transaction. Upon reinstatement, the supervisor will notify the LASO and return all agency equipment to the user. The LASO will reactivate the user accounts on all systems and applications. VILLAGE OF EL PORTAL POLICE DEPARTMENT DEPARTMENTAL ORDERS CHAPTEREFFECTIVE DATE REVISEDCHIEF OF POLICE