CORRECTIONS AND REHABILITATION, CALIFORNIA DEPARTMENT OF (CDCR) - 2017

Home Browse Search

Parole LEADS Information Security Procedures Agency Enrollment Process In order to gain access to Parole LEADS, a local law enforcement agency must be physically located in California. Additionally, they must already access Criminal History Information from the California Law Enforcement Telecommunications System (CLETS) and be free of sanctions from either DOJ or CLETS Advisory Committee. The agency will be required to execute a Parole LEADS Agency Participation Agreement, which is provided as an attachment to this document and a Participating Hold Harmless Agreement. Both these agreements must be signed by the agency head, the highest level authority within the agency, usually the Chief of Police or the Sheriff. The Agency Participation Agreement emphasizes the importance of handling CORI properly, outlines the operational environment through which Parole LEADS may be accessed, and requires agency to follow the Parole LEADS Policies and Procedures. The Agency's chief official must also designate a "primary contact" for the agency. This person will have the authority to speak on behalf of the agency on Parole LEADS matters and approve all their agency's users and be the sole contact to deal directly with the Parole LEADS Security Administrator or designee. All requests for Parole LEADS access must be approved by, and routed through, this primary contact person. If the "primary contact" person is to be changed, a revised Agency Participation Agreement signed by the head of the agency is required. Once an agency is approved for Parole LEADS access, each end user will be required to complete a Parole LEADS End User Agreement. Law enforcement agencies interested in gaining access to the Parole LEADS application should direct e-mail to ParoleLEADS2@cdcr.ca.gov. End User Site Requirements The Parole LEADS end user physical sites are required to provide adequate controls and countermeasures to protect the CORI. Parole LEADS CORI shall be accessed exclusively from authorized computer workstations physically housed authorized agency's place of business or law enforcement -issued portable devices such as laptop or notebook computers and "smart" phones. Any other access, including access from any personally owned, remote, mobile or home-based computer is expressly prohibited. All agencies' computer facilities with access to Parole LEADS are required to have physical controls to prevent unauthorized access due to the sensitivity of CDCR computer systems. Agency -issued portable devices such as laptop or notebook computers and "smart" phones must employ safeguards to prevent unauthorized access to Parole LEADS CORI information. Each custodian of Parole LEADS information shall establish physical and software controls over its information assets. It is required that someone be assigned to manage the end user system, including the security of the information it contains. Parole LEADS Operations & Maintenance System Startup The first screen that any user sees after logging into Parole LEADS shall display the Terms and Conditions for using the application. Parole LEADS System Updates/Changes All Parole LEADS system updates or changes relating to CORI data security or end user access shall be approved by the Parole LEADS Information Security Office. Once approved, Enterprise Information Systems (EIS) shall implement and enforce those changes. Strict configuration management of Parole LEADS shall be enforced by EIS at all times. Parole LEADS Database Extraction The Parole LEADS Database Extraction uses information generated from the DAPO's Statewide Parolee Database. The time frame required for extracting information from the CDCR organizational network varies according to the date entered and the number of records returned for the particular agency unit code as defined earlier. Parole LEADS is the delivery mechanism for parole data contained within SOMS, an offender management system used exclusively by CDCR. Parole LEADS is updated