2142 Management Control Agrmt for Criminal Justice IT ServicesCITY OF
S,kNFORD
0
FLORIDA
(SANFORD POLICE DEPARTMENT)
TRANSMITTAL MEMORANDUM
TO: City Clerk
REa _ Request for Services
The item(s) noted below is/are attached and forwarded to your office for the following action(s):
❑
Development Order
❑ Mayor's signature
❑
Final Plat (original mylars)
❑ Recording
❑
Letter of Credit
❑ Rendering
❑
Maintenance Bond
❑ Safe keeping (Vault)
❑
Ordinance
❑
❑
Performance Bond
❑
Resolution
®
Management Control Agreement Between Sanford Police Department and City of Sanford
for the Purpose of Providing Criminal Justice Information Technology Services
Once completed, please:
❑ Return original
❑ Return copy
® Maintain the fully executed copy on file.
Special Instructions:
Please advise if you have any questions regarding the above.
Thank you!
.T owi wavd,6 Deewt6wt 11, 2019
From Date
Management Control Agreement
Between
Sanford Police Department
And
City of Sanford
For the Purpose of
Providing Criminal Justice Information Technology Services
Purpose:
This Management Control Agreement (MCA) is between the Sanford Police Department and City of Sanford. This agreement
covers the overall supervision of technical services provided by the City of Sanford on behalf of the Sanford Police Department
for data transport, network services used to access equipment, systems design, programming and operational procedures associated
with the development, implementation, and maintenance of the Sanford Police Department system to include the National Crime
Information Center (NCIC) and the Florida Crime Information Center (FCIC) programs that may be subsequently designed and/or
implemented within the Sanford Police Department.
Pursuant to the CJIS Security Policy, it is agreed that with respect to administration of that portion of computer systems and network
infrastructure interfacing directly or indirectly with the state network (FCIC/NCIC) located within the City of Sanford for the interstate
exchange of criminal history/criminal justice information, the Sanford Police Department shall have the authority, via managed
control, to set, maintain, and enforce:
(1) Priorities. Any CJIS priorities regarding the access, use, and maintenance of CJIS IT equipment used for transporting and
processing FBI CJIS data.
(2) Standards for the selection, supervision, and termination of personnel access to Criminal Justice Information (CJI). The City of
Sanford will provide the Sanford Police Department a list of personnel who will have physical and/or logical access to the
network accessing, processing, storing or transmitting CJI. Prior to giving those individuals access to the network or any
component thereof, the individual will have a fingerprint -based record check completed under the Sanford Police Department's
ORI and Level 4 Security Awareness Training. If the City of Sanford terminates a member of the Information Technology Team,
the Sanford Police Department will be notified and all rights and privileges for that individual will be immediately revoked. The
City of Sanford will update and keep current a list of individuals with access and provide that to the Sanford Police Department
any time a change occurs.
(3) Policy governing operation of justice systems, computers, access devices, circuits, hubs, routers, firewalls, and any other
components, including encryption, that comprise and support a telecommunications network and related criminal justice systems
to include but not limited to criminal history record/criminal justice information, insofar as the equipment is used to process or
transmit criminal justice systems information guaranteeing the priority, integrity, and availability of service needed by the criminal
justice community. The City of Sanford will ensure the Sanford Police Department network is monitored at all times for any
security related incidences or intrusions. If found, the City of Sanford will notify the Sanford Police Department immediately and
work to contain the breach and limit the loss of data or system integrity. if the City of Sanford outsources to a third party vendor,
they will consult with the Sanford Police Department for guidance regarding personnel and access prior to allowing the third
party any physical or logical access to the criminal justice network.
(4) Restriction of unauthorized personnel from access or use of equipment accessing the State network. Any individual that works
directly or indirectly with the City of Sanford who fails to maintain up-to-date Security Awareness training or whose fingerprint
based record check reveals a felony of any kind, that individual will be denied physical and logical access to CJI until a review
by the CSO is either approved or denied.
(5) Compliance with all rules and regulations of the Sanford Police Department Policies and CJIS Security Policy in the operation
of all information received. The City of Sanford will comply with all rules, regulations and procedures outlined by the Sanford
Police Department and the CJIS Security Policy in regards to personnel and the maintenance and upkeep of the criminal justice
network.
It is further understood that "...management control of the criminal justice function remains solely with the Sanford Police
Department." As per Section 5.1.1.4 of the. CJIS Security Policy,
This agreement covers the overall supervision of all Sanford Police Department systems, applications, equipment, systems design,
programming, and operational procedures associated with the development, implementation, and maintenance of any Sanford
Police Department system to include FCIC and NCIC Programs that may be subsequently designed and/or implemented within the
Sanford Police Department.
Ckiwl Smith, Chief of Police Date Norton aparte, Ci Manager bate
Sanford Police Department City of , niford