CALIFORNIA DEPARTMENT OF CORRECTIONS AND REHABILITATION, THE (CDCR)

Home Browse Search

with current parolee information every 20 minutes from SOMS to provide near real-time data to local law enforcement. DAPO makes no guarantee regarding the accuracy of Parole LEADS information, and strongly encourages all participating agencies to verify information with a local Parole Agent before taking any action or making any decision based on this information. It is important that all users be adequately trained to use Parole LEADS but also to notify the Parole LEADS Security Administrator or designee regarding database inconsistencies or errors to ensure proper resolution. With every database download there will be a separate index file of CDC numbers provided. This file contains a list of parolees who should be found in the parolee database after the download. When the agency's database is built from sequential database downloads (based on a user defined date) it is imperative that the agency, at the conclusion of each sequential download, compare this index file with the database to assure information integrity. If there are any discrepancies, the user may have to repeat the download based on different dates or request a new full download. Failure to apply this error correcting mechanism consistently may allow parolee information to become inaccurate and may constitute grounds for suspension or termination of Parole LEADS access. Parole LEADS Logon and Password Standards Access to Parole LEADS is restricted by a reusable password for authorized persons only. Authorized persons shall never reveal their passwords to anyone for any reason, nor record them or display them in a location or manner where others may discover them. Authorized persons engaging in a computer session shall log off before leaving the immediate vicinity of the terminal because the password that allowed the session to begin remains in effect throughout the session. Violation of this policy will result in the revocation of all user access privileges and appropriate disciplinary action. Such disciplinary action may be based not only on the violation itself, but also on all activity performed by those using the password. As defined in the attached Agency Participation Agreement, the integrity of user accounts, such as ensuring the user is an active member of that agency, will be the responsibility of agency staff unless other arrangements are jointly agreed to by the agency and DAPO. A separate Account Password Administration Agreement for those assigned as Password or Account Administrators for their respective agency shall be submitted after the user reviews the training materials available in Learning Management Section (LMS) in Parole LEADS. Whenever an authorized person terminates employment or is reassigned to duties that do not require access to Parole LEADS, the "primary contact" for the authorized agency shall, without delay, notify Parole LEADS Security Administrator or designee. There is a need to ensure that authority to access Parole LEADS is restricted to persons with a demonstrated right and need for access. The request for each Parole LEADS account will first be approved by the agency's "primary contact" with this "need to know, right to know" concept in mind. The lack of use of Parole LEADS is assumed to be evidence that the use is no longer required. Accounts may be disabled without notice if they are not used regularly. Password Policy Passwords shall be a minimum of eight (8) characters consisting of a feast one upper case letter, one lower case letter and one number. The Parole LEADS Security Administrator shall be responsible for ensuring each authorized user's password can be set, reset, and/or changed either through user initiated or System Administrator initiated. Security questions within the account profile of an authorized user will be utilized to confirm identity before the password is reset. If a password is forgotten or compromised, the end user must immediately take action to change their password or contact the Parole LEADS Security Administrator or designee. Parole LEADS end users shall be responsible for promptly notifying the Parole LEADS Security Administrator or designee when