UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

Post on 01-Apr-2015

263 views 0 download

transcript

UNDERSTANDING CJIS ONLINE

FOR CJIS SECURITY AWARENESS TRAINING & TESTING

NAVIGATING THE CJIS ONLINE SITE

Walking you through the CJIS Online system:

• Logging in as an agency administrator

• Setting up user accounts

• Modifying user accounts:

• In-activating users

• Resetting login credentials

• Relaying user login credentials & testing instructions

• Generating & reviewing test activity repots.

The CJIS Online system is addressed in LEDS Rep Chapter 08 – CJIS Security Awareness Training.http://apps.oregon.gov/Application/PDFDownload/OSP/pdfdownload/osp/LEDS_CJIS_Security_Awareness_Training_Documentation.pdf

CJIS ONLINE IS FOR YOUR LEVEL 1 & 3 USERS

It is your agencies responsibility to maintain CJIS Security Awareness training documentation.

CJIS Security Awareness training shall be required within six months of initial assignment, and biennially thereafter, for all personnel who have access to CJI.

If your employee is not LEDS Certified they will need to be entered into CJIS Online:

• Level 1: Physical Access

• Level 3: Personnel with Information Technology roles

OSP has provided a way for agencies to maintain your records online using the CJIS Online Portal.

PHYSICAL ACCESS (LEVEL 1)

Question: Who has physical access?

Answer: Anyone who has unescorted (eyes on at all times) access to areas that process or store CJI. Common examples include the following roles:

• Janitors

• Building maintenance

• Radio technician vendors

• Anyone given unfettered walking access to your secured location.

PERSONNEL WITH INFORMATION TECHNOLOGY ROLES (LEVEL 3)

Question: What does this mean?

Answer: Anyone that has unescorted access to networking equipment such as: routers switches and hubs or servers processing or storing CJI.

Access can be as simple a key to the door that secures this equipment.

This can also be as complex as vendors with VPN access (unescorted) to systems that process CJI.

LOGIN TO THE CJIS ONLINE

Login to CJIS Online as an agency: https://www.cjisonline.com/index.cgi

If you cannot login call or email LEDS Training to set your password: 503-934-2341 orTraining.LEDS@state.or.us

Agencies can set only one admin. for CJIS online.

LOGIN TO THE CJIS ONLINE

Your login credentials are unique to your and your agency:

CJIS ONLINE – AGENCY OPTIONS

This is your agency home screen listing all the options available to you

Administrate your agency, add vendors and run reports.

SETTING UP NEW CJIS ONLINE USERS

To add new users, go to IT & Agency User Admin:

SETTING UP NEW CJIS ONLINE USERS

Your existing users will be listed alphabetically.

You can add new users by clicking on the “Add New IT or Agency Employee” button:

SETTING UP NEW CJIS ONLINE USERS

You will need to provide the below information for new users.The fields with an asterisk are the only required fields.

You can set the password to any secure password appropriate for your agency.

Make a note of the employees login credentials – you will be relaying them so they can start the training process.

You will be asked to assign the user with either level 1 or 3 level training.

Remember LEDS users are level 2, their CJIS training is covered during their online recertification process. You do not need to setup CJIS accounts for LEDS staff.

IF THE NEW ACCOUNT IS REJECTED

If you get an error message saying this is a duplicate record, this means this user has already been created by another agency. LEDS Training can either transfer the user to be active for your ORI or in the case of vendors send you the credentials for your records. Do not create duplicate user accounts.

SETTING UP NEW CJIS ONLINE USERS

Your newly added employee will now be listed in your IT & Agency Employees list.

You may click on the magnifying glass to view their record, edit their credentials or inactivate them.

SETTING UP NEW CJIS ONLINE USERS

You can edit your employees CJIS Online training file including their name, login credentials, you can add training and certification history and update their fingerprint date.

EMAIL THE NEW CJIS USER AND RELAY THEIR LOGIN CREDENTIALS

LEVEL 1 & LEVEL 3 USERS WILL LOGIN AS“IT & AGENCY USERS”

https://www.cjisonline.com/index.cgi

SETTING UP NEW CJIS ONLINE USERS

As directed in your email, after logging in the users will first complete the training modules, then they will complete their test. Users must score at least 70% to pass the test and will have 1 hour to answer the 25 randomly selected questions. If they do not pass the test they must wait 1 hour before trying again.

COMPLETION OF TRAINING & TESTING

Upon successful completion (70% or better) of the CJIS Online testing the user will get a certificate of completion. This user is now certified for two (2) years. Upon expiration the user will need to complete the training and & testing process all over again – there is no recertification for CJIS Security Trainnig.

MONITORING TESTING ACTIVITY

Logging in as a “Local Agency Admin” you can also run reports to monitor your agencies testing activity.

MONITORING TESTING ACTIVITYRegularly reviewing your certification expiration report gives you an agency wide perspective of your

upcoming expiration dates. Be proactive and administer training & testing reminders 60 days in advance to give your users plenty of time to complete the testing process.

SETTING UP NEW CJIS ONLINE USERS

This command will generate a list of all the expiration dates for your entire agency including active employees with no training history.

MONITORING TESTING ACTIVITY

This report will list all the dates in the database for your agency.Pay special attention to the employees you have created accounts

for but how have not completed the necessary training activity.

QUESTIONS?

Reference LEDS Rep Chapter 08 – CJIS Security Awareness Training for more information.http://apps.oregon.gov/Application/PDFDownload/OSP/pdfdownload/osp/LEDS_CJIS_Security_Awareness_Training_Documentation.pdf

CONTACT INFO

Jennifer Hlad, LEDS Training SpecialistJennifer.Hlad@state.or.us

503-934-2341 (Desk)503-378-2121 (Fax)

Greg Verharst, CJIS Information Security Officer

Greg.Verharst@state.or.us

503-378-3055 Ext. 55002 (Desk)

503-364-2661 (Fax)