What Is Criminal Justice Information and Why Must It Be Protected?

Technology has drastically revolutionized all sectors globally, including law enforcement and the justice system. Technology in fact has been a driving force behind the creation and extensive utilization of Criminal Justice Information (CJI), a crucial resource in the modern justice system. This article provides a comprehensive understanding of CJI, the critical role it plays in the justice system, and the importance of shielding it from unauthorized access.

Overview of Criminal Justice Information

Criminal Justice Information (CJI) refers to an extensive array of data collected, stored, and managed by law enforcement agencies, integral in ensuring law and order. It encompasses a wide variety of information, including arrest records, criminal histories, biometric data, crime incident and investigative reports, judicial information such as court orders and sentencing, and correctional tracking records.

CJI is not restricted to textual data; it also includes visual and audio information such as crime scene photographs, surveillance videos, and recorded interviews. The truth in the saying, “information is power,” is profoundly reflected through the utilization of CJI. It is a valuable tool that enhances efficiency and accuracy in the administration of justice, safeguarding society from criminal elements.

The Role of CJI in the Justice System and Law Enforcement

The importance of CJI in law enforcement and the justice system cannot be understated. It serves as a vital resource that officers and investigators use to identify patterns, form connections and make informed decisions about crime-solving strategies. For instance, through CJI, a law enforcement officer can access a suspect’s criminal history, enabling them to gauge potential threats and act accordingly, thereby ensuring safety.

In the justice system, CJI is indispensable during prosecution and sentencing. Judges and prosecutors use the information to understand the defendant’s past encounters with the law, aiding in the determination of the guilt or innocence, concluding an appropriate sentence if convicted. In essence, CJI contributes significantly to upholding justice and maintaining order in society.

Importance of Protecting Criminal Justice Information

The requirement to protect Criminal Justice Information (CJI) is not merely a point of good practice; it’s a regulatory necessity. Criminal Justice Information encapsulates sensitive data such as the criminal histories of individuals, the details of ongoing investigations, and relevant judicial documentation. Unauthorized access or exposure of this information can have severe consequences, risking privacy, justice, and even safety. It could compromise ongoing investigations, harm innocent people, and undermine the public’s trust in the justice system.

In addition, the ubiquitous nature of digital platforms and the increasing sophistication of cyber threats have heightened the risks associated with the exposure of CJI. Cyberattacks targeting law enforcement databases can lead to data breaches, exposing sensitive information. Hence, upholding stringent security measures to protect CJI is a priority in modern justice administration. With the data’s potential misuse in mind, the necessity of protecting CJI becomes even more paramount.

How Is Criminal Justice Information Protected?

The protection of CJI is entrusted to the organizations that handle it. This task is by no means light. It involves ensuring that all CJI remains confidential, maintaining its integrity, and assuring its availability when needed. Many agencies have implemented safeguards to protect CJI, such as strict user access controls, secure communication systems, and robust cybersecurity measures. Moreover, there is constant vigilance against potential security threats and ongoing efforts to update and strengthen protective measures in response to evolving cyber threats.

Ultimately, the key to successfully protecting CJI lies in compliance with the CJIS Security Policy. This comprehensive document provides a framework for the creation, viewing, modification, transmission, dissemination, storage, and destruction of CJI. It lays out stringent standards to prevent unauthorized access and protect CJI at every stage of its lifecycle.

The Role of CJI in Criminal Justice Information Services (CJIS) and CJIS Compliance

The Criminal Justice Information Services (CJIS) is a division of the Federal Bureau of Investigation (FBI) responsible for the collection, storage, and dissemination of CJI. CJIS provides law enforcement agencies, academic institutions, and criminal justice entities across the United States with the CJI they need to fulfill their duties and responsibilities effectively.

Given the sensitivity of CJI, its handling is regulated by a set of security protocols and standards known as the CJIS Security Policy. The goal of CJIS Compliance is to protect CJI from unauthorized access, thereby ensuring privacy and maintaining the integrity of the information. Compliance is mandatory for every entity that accesses or uses CJI, failure to adhere can result in the revocation of access rights.

Understanding the CJIS Security Policy

The CJIS Security Policy is a set of mandatory protocols promulgated by the FBI that governs the use of CJI. It provides a secure framework for managing, accessing, and disseminating CJI by setting standards for data encryption, authentication, access control, and audit logging among others. The policy is designed to protect and preserve the confidentiality, integrity, and availability of CJI at all times.

The CJIS Security Policy emphasizes a shared management approach for the security of CJI, involving local, state, tribal, federal law enforcement, and criminal justice agencies. Compliance with this policy is not just about following the rules; it reaffirms the commitment to protect the citizens’ rights and strive for a secure and effective criminal justice system.

What Is CJIS Compliance?

CJIS Compliance refers to the adherence to the set of standards and rules outlined in the CJIS Security Policy. Every individual or organization that has access to, or uses CJI is obligated to comply with these regulations. This includes local, state, and federal law enforcement agencies, as well as private contractors and non-criminal justice agencies. Noncompliance can lead to the termination of access to the CJIS systems and databases.

The goal of maintaining CJIS Compliance is not merely about adherence to a set of guidelines. At its core, it is about ensuring the privacy and rights of individuals and maintaining the integrity of the criminal justice system. With the continual advancements in technology and the growing threat of cybercrime, the protection of CJI has become more critical than ever before.

Consequences of Noncompliance

Noncompliance with the CJIS Security Policy can have serious repercussions. Besides exposing sensitive information to unauthorized access, it can lead to disciplinary actions, including administrative sanctions, criminal charges, and the revocation of access rights to CJI. Additionally, noncompliance can cause irreversible damage to an agency’s reputation, affecting its credibility and the public’s trust.

Thus, all entities that handle CJI must take their commitment to protect this information seriously. They must adhere strictly to the CJIS Security Policy, investing in necessary security measures and educating their personnel about the importance of compliance. Remember, the protection of CJI is not just about upholding regulatory standards; it’s about safeguarding justice and public safety.

Key Functions of the FBI Criminal Justice Information Services Division

The FBI’s Criminal Justice Information Services (CJIS) Division serves as the central hub for managing critical criminal justice information for law enforcement across the United States.

Its primary responsibilities include operating the National Crime Information Center (NCIC), managing the Integrated Automated Fingerprint Identification System (IAFIS) and its successor, Next Generation Identification (NGI), which provide advanced biometric identification services crucial for linking suspects to crime scenes and identifying individuals.

CJIS also facilitates secure information sharing through platforms like the Law Enforcement Enterprise Portal (LEEP), offering access to numerous databases and analytical tools.

CJIS also provides essential support, training, and auditing services to state, local, and tribal agencies to ensure they meet the strict security standards outlined in the CJIS Security Policy.

Understanding these functions is vital because they underpin the secure and efficient operation of the justice system; compliance with CJIS standards ensures the integrity and confidentiality of this sensitive data, supporting effective law enforcement and protecting individual rights.

About the CJIS Division: Mission and Structure

The Criminal Justice Information Services (CJIS) Division, established in February 1992, operates as the largest division within the Federal Bureau of Investigation (FBI). Headquartered in Clarksburg, West Virginia, CJIS serves as a high-tech hub, acting as the central repository for crucial criminal justice information.

Its core mission is to reduce terrorist and criminal activities by providing timely and relevant CJI to qualified law enforcement, criminal justice, national security, intelligence community partners, and other authorized agencies.

Structurally, the CJIS Division manages several key operational programs, including the National Crime Information Center (NCIC), Next Generation Identification (NGI), and Uniform Crime Reporting (UCR).

Governance is managed through a shared philosophy involving the FBI and user agencies, guided by the CJIS Advisory Policy Board (APB), ensuring continuous improvement and stringent security measures for protecting sensitive criminal justice information.

National Crime Information Center (NCIC): Core Database Within CJIS

The National Crime Information Center (NCIC), operational since 1967, is a vital computerized index managed by the FBI’s CJIS Division, serving as the United States’ central database for crime-related data. It contains numerous files categorized broadly into person files and property files.

Key record categories include wanted persons, missing persons, immigration violators, individuals under supervised release, protective orders, unidentified persons, stolen vehicles, stolen license plates, stolen guns, stolen articles, and stolen securities.

Law enforcement agencies nationwide query NCIC 24/7 via state or regional systems or direct connections to obtain critical criminal justice information instantly. Agencies also contribute and update records, ensuring data timeliness.

Governance mandates strict accuracy and validation procedures. Robust security measures, including multi-factor authentication, encryption for data in transit and at rest (where applicable), and comprehensive auditing, protect against unauthorized access. Real-world examples include officers identifying wanted individuals during traffic stops, recovering stolen vehicles, locating missing children, and verifying protection orders, significantly enhancing investigative capabilities and officer safety.

Additional CJIS Programs Supporting Law Enforcement

The Criminal Justice Information Services (CJIS) Division of the FBI oversees several critical systems that support law enforcement, background checks, and national security. These systems handle vast amounts of sensitive data and are subject to strict security and compliance requirements. Here’s an overview of the major systems regulated under CJIS policies:

• Next Generation Identification (NGI): Replacing the older Integrated Automated Fingerprint Identification System (IAFIS), NGI provides the world’s largest electronic repository of biometric and criminal history information. It includes fingerprints, palm prints, iris scans, and facial recognition data, significantly enhancing identification capabilities for law enforcement and background checks.
• National Instant Criminal Background Check System (NICS): Used by Federal Firearms Licensees (FFLs), NICS determines if prospective firearm buyers are eligible to purchase firearms or explosives according to federal and state law. It queries available records in NCIC, the Interstate Identification Index (III), and the NICS Indices.
• Uniform Crime Reporting (UCR) Program: This program collects, publishes, and archives crime statistics from law enforcement agencies nationwide. Its primary objective is to generate reliable information for use in law enforcement administration, operation, and management. It includes summary data and, increasingly, detailed incident data through NIBRS.
• National Incident-Based Reporting System (NIBRS): An enhancement to the UCR Program, NIBRS collects detailed data on each single crime occurrence. It captures information on victims, known offenders, relationships between victims and offenders, arrestees, and property involved in crimes, providing a more comprehensive view of crime incidents for analysis and policy making.

Agencies ensure compliance and data integrity across these programs through rigorous adherence to the CJIS Security Policy, regular audits, mandated training, and accurate data submission protocols. Protecting the sensitive criminal justice information within these systems is paramount.

CJIS Community Outreach and Training Initiatives

The CJIS Division actively engages its vast user community through various outreach and training initiatives designed to foster collaboration and ensure consistent compliance with security policies.

Key engagement mechanisms include the CJIS Advisory Process, involving Advisory Policy Boards (APBs) composed of representatives from local, state, tribal, and federal agencies, who provide guidance on policy and operational matters.

CJIS offers extensive training resources, such as online courses, webinars, and security awareness materials covering the CJIS Security Policy and system usage. Specialized training and certification programs are available for personnel like Terminal Agency Coordinators (TACs) and local agency security officers (LASOs).

Community outreach efforts, like the FBI Citizens Academy hosted by CJIS, aim to educate community leaders about FBI operations, including the handling of criminal justice information. These initiatives emphasize knowledge-sharing and reinforce the shared responsibility model essential for safeguarding sensitive data across the entire criminal justice community.

Kiteworks Helps Organizations Demonstrate CJIS Compliance With Secure File Sharing

Criminal Justice Information is an integral part of modern law enforcement and the justice system. However, given its sensitive nature, it’s essential to protect CJI from unauthorized access. This task falls into the hands of the Criminal Justice Information Services, a division of the FBI, and other entities that handle CJI. Compliance with the CJIS Security Policy is mandatory to ensure the protection, confidentiality, and integrity of CJI. Noncompliance can lead to severe sanctions and a breach of public trust. Hence, all involved in handling, whether they’re storing or sharing CJI, must take their roles seriously and strive to maintain compliance with the CJIS Security Policy.

The Kiteworks Private Content Network, a FIPS 140-2 Level 1 validated secure file sharing and file transfer platform, consolidates email, file sharing, web forms, SFTP and managed file transfer, so organizations control, protect, and track every file as it enters and exits the organization.

With Kiteworks, organizations control access to sensitive content; protect it when it’s shared externally using automated end-to-end encryption, multi-factor authentication, and security infrastructure integrations; see, track, and report all file activity, namely who sends what to whom, when, and how. 

Finally demonstrate compliance with regulations and standards like GDPR, HIPAA, CMMC, Cyber Essentials Plus, IRAP, and many more. 

To learn more about Kiteworks, schedule a custom demo today. 

Back to Risk & Compliance Glossary