C.S.A. - Answers Criminal Justice Information System Agency
I.S.O. - Answers Information Security Officer
C.A.C. - Answers CJIS Agency Coordinator (CAC): Will act as the central point of contact regarding all
communications between FDLE CJIS and the User.
LASO - Answers Local Agency Security Officer (LASO): The LASO is responsible for the agency's
compliance with the FBI CJIS Security Policy (CSP) and all applicable security requirements of the
criminal justice information network and systems.
Physically Secure Location - Answers The Department's Physically Secure Location is the entire
department, separated from non-secure locations by physical controls.
F.A.C. - Answers FCIC Agency Coordinator. The FAC ensures compliance with the legal and policy
requirements contained within the CJIS User Agreement and Requirements Document.
Visitor - Answers A visitor is defined as a person who visits the Department on a temporary basis who is
not employed by the Department and has no unescorted access to the physically secure location within
the Department.
PII - Answers Personally Identifiable Information (PII) is information which can be used to distinguish or
trace an individual's identity such as name, social security number, or biometric records.
CJI - Answers Criminal Justice Information (CJI) must be protected from unauthorized disclosure,
alteration or misuse.
Dissemination Log - Answers The Department maintains a Criminal Dissemination Log of all criminal
histories which are disseminated outside of the Records Department.
Security Incident - Answers A security incident is a violation or possible violation of the technical aspects
of the CJIS Security Policy that threatens the confidentiality, integrity or availability of FCIC/NCIC.
CJIS Security Policy - Answers The CJIS Security Policy outlines the standards and requirements for the
protection of criminal justice information.
User Agreement - Answers A document signed by a CEO or Agency Head designating a CAC and outlining
the responsibilities and authority of the CAC.
Triennial CJIS Technical Audit - Answers An audit conducted every three years to assess compliance with
CJIS Security Policy.
Level 4 Security Awareness Training - Answers Training that must be completed every two years by the
LASO, available in CJIS Online.
, Secondary Dissemination - Answers The release of criminal history information from the FCIC/NCIC
computer systems to unauthorized individuals.
Authorized Recipients - Answers Individuals or agencies that are permitted to receive criminal justice
information.
CJIS Online - Answers An online platform where various CJIS training and resources are available.
CJI inquiries - Answers Requests for Criminal Justice Information that must be logged and protected
from unauthorized access.
Criminal Justice Agencies - Answers Agencies that are authorized to receive and disseminate criminal
justice information.
FCIC/NCIC - Answers Florida Crime Information Center/National Crime Information Center, systems that
govern the access and dissemination of criminal history information.
Security Measures - Answers Approved and appropriate actions taken to protect criminal justice
information and ensure compliance with security policies.
Technical Aspects - Answers The technological components and configurations that must be secured
under the CJIS Security Policy.
Network Diagram - Answers A visual representation of the agency's current network, required during
the CJIS Technical Audit.
CJIS User Agreement - Answers A document that outlines the terms and conditions for agencies using
the CJIS system.
Security Incident Response - Answers The actions taken in response to a security incident involving CJIS
information.
Confidential Law Enforcement Use Only - Answers A designation that must be stamped on disseminated
CJI outside of the Department.
Indicators of Security Incident - Answers Signs suggesting a possible security breach.
System Crash - Answers Unexpected failure of a system without explanation.
Mysterious User Accounts - Answers Accounts created without following standard procedures.
Sudden Account Activity - Answers Unusual spikes in previously inactive account usage.
Strange File Names - Answers Files appearing with unusual or novel identifiers.
Accounting Discrepancies - Answers Inconsistencies in financial records or transactions.
File Modification - Answers Changes in file lengths or modification timestamps.