CORRECTIONS AND REHABILITATION, CALIFORNIA DEPARTMENT OF (CDCR) - 2017

Home Browse Search

a user ID and password should be disabled. Each Parole LEADS end user shall be responsible for changing his or her password at least once every 75 days to counter the possibility of undetected password compromise. A password shall be invalidated at the end of 90 days. A user who logs on with an ID having an expired password shall be required to change the password for that user ID before further access to the system is permitted. Parole LEADS Security Audit Records Management Parole LEADS generates security audit records at each of the firewalls, as well as at the various servers. The Parole LEADS Information Security Office (ISO) shall ensure that security audit records be reviewed to detect potential attacks on Parole LEADS, and that appropriate alarms be setup to notify the Parole LEADS Security Administrator when anomalous events occur. The audit function supports accountability by providing a trail of user actions. Actions are associated with individual users for all security relevant events. The audit trail can be examined to determine what happened and which user was responsible for a security relevant event. For each recorded event, the audit record will include the date and time of the event, type of event, offered user ID for unsuccessful logins or actual user ID for other events, and origin of the event (e.g., computer name or IP address). The Parole LEADS application shall cause a record to be written to the security audit trail for at least each of the following events: • Failed user authentication attempts • Resource access attempts that are denied • Attempts, both successful and unsuccessful, to obtain privilege • Activities that require privilege • Successful access of security critical resources • Changes to Parole LEADS users' security information • Changes to the Parole LEADS system security configuration or modification of system software Alarm thresholds should be determined in order to notify the Parole LEADS ISO or Enterprise EIS personnel of potential security violations. Parole LEADS audit trail records shall be kept for a minimum of three (3) years. Parole LEADS Agency Service Suspension or Termination Process If Parole LEADS service to an authorized agency must be suspended or terminated, DAPO shall issue a letter suspending or terminating the agency and its associated end users. This letter will explain the reasons for the suspension or termination and advise the agency that the action can be appealed to the DAPO Director. All authorized user logon identifiers and passwords associated with that agency will be canceled by the Parole LEADS Security Administrator immediately. If an agency loses CLETS Criminal History capability or is sanctioned by action of DOJ or the CLETS Advisory Committee, that agency will be terminated from Parole LEADS access until such time as the sanctions are lifted. Parole LEADS Security Incident Escalation Standards Reporting It is the responsibility of all users with authorized access to Parole LEADS to report all incidents that would place DAPO information assets at risk. The following incidents shall be reported to the Parole LEADS Security Administrator or designee at ParoleL EADS2@cdcr.ca.gov: • Any incidents involving or suspected to involve unauthorized access to Parole LEADS information, automated files, or