Criminal Justice Information Security and Access

 

What is Criminal Justice Information?

Criminal justice information (CJI) is defined as "information collected by criminal justice agencies needed for the performance of their legally authorized, required function," (CRS 24-72-302)  This information includes:

  • Vehicle registration
  • Driver license information
  • Crime and arrest records
  • Wanted persons/other persons of interest
  • Sex offenders
  • Missing persons
  • Unidentified persons
  • Property (stolen, recovered, lost, used in crimes, used by fugitive and pawned)
  • Bulletins:  notices from other states, weather/road conditions, vehicle law summaries, description of DMV files, criminal history files, boat information, Homeland Security bulletins
  • Notification of urgent situations (crimes just occurred, jailbreaks, unsolved crimes, attempts to locate, emergency messages)
  • Crime and arrest statistics
  • Incident reports
  • Contact information for criminal justice agencies nationwide

Criminal Justice Information (CJI) Governance and Regulation

The Colorado Bureau of Investigation (CBI) is the state CJIS Systems Agency (CSA) providing all Colorado criminal justice agencies with connectivity to the Federal Bureau of Investigation Criminal Justice Information Services (FBI-CJIS) information systems.  Additionally, some non-criminal justice agencies also have limited access to CJI pursuant to state and federal laws. Under the agreement between the FBI and CBI, the CBI is tasked with ensuring proper use, storage and security of CJI within the state of Colorado. Criminal justice agencies accessing CCIC and the National Crime Information Center (NCIC) do so under agreements between CBI and their respective agencies. Under this shared management model, the FBI, CBI and each local agency does their part to ensure record quality and security.  Rules governing the use of CCIC and NCIC information are based on the following federal laws:

These standards specifically apply to CJI derived from the Colorado Crime Information Center (CCIC), the National Crime Information Center (NCIC), and the International Justice and Public Safety Network (Nlets).

Each agency in Colorado with access to CCIC and its interconnected systems must comply with the aforementioned standards as a condition of access. These standards are reflected in detailed policies including the CJIS Security Policy.  The CJIS Security Policy was developed by the Federal Bureau of Investigation Criminal Justice Information Services Division, also known as FBI-CJIS, at the request of the CJIS Advisory Policy Board, who manages the policy. The policy sets wide-ranging requirements for everything from facility security to encryption. The CBI validates agencies are ensuring the quality and security of CJI by performing audits of all agencies using these systems. Failure to comply with the CJIS security policy may place a agency's access to CCIC in jeapoardy.

For more information on the CJIS Security Policy and its application in Colorado, go to: https://www.colorado.gov/pacific/cbi/cjis-security-policy