UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

24
UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING

Transcript of UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

Page 1: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

UNDERSTANDING CJIS ONLINE

FOR CJIS SECURITY AWARENESS TRAINING & TESTING

Page 2: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

NAVIGATING THE CJIS ONLINE SITE

Walking you through the CJIS Online system:

• Logging in as an agency administrator

• Setting up user accounts

• Modifying user accounts:

• In-activating users

• Resetting login credentials

• Relaying user login credentials & testing instructions

• Generating & reviewing test activity repots.

The CJIS Online system is addressed in LEDS Rep Chapter 08 – CJIS Security Awareness Training.http://apps.oregon.gov/Application/PDFDownload/OSP/pdfdownload/osp/LEDS_CJIS_Security_Awareness_Training_Documentation.pdf

Page 3: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

CJIS ONLINE IS FOR YOUR LEVEL 1 & 3 USERS

It is your agencies responsibility to maintain CJIS Security Awareness training documentation.

CJIS Security Awareness training shall be required within six months of initial assignment, and biennially thereafter, for all personnel who have access to CJI.

If your employee is not LEDS Certified they will need to be entered into CJIS Online:

• Level 1: Physical Access

• Level 3: Personnel with Information Technology roles

OSP has provided a way for agencies to maintain your records online using the CJIS Online Portal.

Page 4: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

PHYSICAL ACCESS (LEVEL 1)

Question: Who has physical access?

Answer: Anyone who has unescorted (eyes on at all times) access to areas that process or store CJI. Common examples include the following roles:

• Janitors

• Building maintenance

• Radio technician vendors

• Anyone given unfettered walking access to your secured location.

Page 5: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

PERSONNEL WITH INFORMATION TECHNOLOGY ROLES (LEVEL 3)

Question: What does this mean?

Answer: Anyone that has unescorted access to networking equipment such as: routers switches and hubs or servers processing or storing CJI.

Access can be as simple a key to the door that secures this equipment.

This can also be as complex as vendors with VPN access (unescorted) to systems that process CJI.

Page 6: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

LOGIN TO THE CJIS ONLINE

Login to CJIS Online as an agency: https://www.cjisonline.com/index.cgi

If you cannot login call or email LEDS Training to set your password: 503-934-2341 [email protected]

Agencies can set only one admin. for CJIS online.

Page 7: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

LOGIN TO THE CJIS ONLINE

Your login credentials are unique to your and your agency:

Page 8: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

CJIS ONLINE – AGENCY OPTIONS

This is your agency home screen listing all the options available to you

Administrate your agency, add vendors and run reports.

Page 9: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

SETTING UP NEW CJIS ONLINE USERS

To add new users, go to IT & Agency User Admin:

Page 10: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

SETTING UP NEW CJIS ONLINE USERS

Your existing users will be listed alphabetically.

You can add new users by clicking on the “Add New IT or Agency Employee” button:

Page 11: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

SETTING UP NEW CJIS ONLINE USERS

You will need to provide the below information for new users.The fields with an asterisk are the only required fields.

You can set the password to any secure password appropriate for your agency.

Make a note of the employees login credentials – you will be relaying them so they can start the training process.

You will be asked to assign the user with either level 1 or 3 level training.

Remember LEDS users are level 2, their CJIS training is covered during their online recertification process. You do not need to setup CJIS accounts for LEDS staff.

Page 12: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

IF THE NEW ACCOUNT IS REJECTED

If you get an error message saying this is a duplicate record, this means this user has already been created by another agency. LEDS Training can either transfer the user to be active for your ORI or in the case of vendors send you the credentials for your records. Do not create duplicate user accounts.

Page 13: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

SETTING UP NEW CJIS ONLINE USERS

Your newly added employee will now be listed in your IT & Agency Employees list.

You may click on the magnifying glass to view their record, edit their credentials or inactivate them.

Page 14: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

SETTING UP NEW CJIS ONLINE USERS

You can edit your employees CJIS Online training file including their name, login credentials, you can add training and certification history and update their fingerprint date.

Page 15: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

EMAIL THE NEW CJIS USER AND RELAY THEIR LOGIN CREDENTIALS

Page 16: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

LEVEL 1 & LEVEL 3 USERS WILL LOGIN AS“IT & AGENCY USERS”

https://www.cjisonline.com/index.cgi

Page 17: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

SETTING UP NEW CJIS ONLINE USERS

As directed in your email, after logging in the users will first complete the training modules, then they will complete their test. Users must score at least 70% to pass the test and will have 1 hour to answer the 25 randomly selected questions. If they do not pass the test they must wait 1 hour before trying again.

Page 18: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

COMPLETION OF TRAINING & TESTING

Upon successful completion (70% or better) of the CJIS Online testing the user will get a certificate of completion. This user is now certified for two (2) years. Upon expiration the user will need to complete the training and & testing process all over again – there is no recertification for CJIS Security Trainnig.

Page 19: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

MONITORING TESTING ACTIVITY

Logging in as a “Local Agency Admin” you can also run reports to monitor your agencies testing activity.

Page 20: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

MONITORING TESTING ACTIVITYRegularly reviewing your certification expiration report gives you an agency wide perspective of your

upcoming expiration dates. Be proactive and administer training & testing reminders 60 days in advance to give your users plenty of time to complete the testing process.

Page 21: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

SETTING UP NEW CJIS ONLINE USERS

This command will generate a list of all the expiration dates for your entire agency including active employees with no training history.

Page 22: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

MONITORING TESTING ACTIVITY

This report will list all the dates in the database for your agency.Pay special attention to the employees you have created accounts

for but how have not completed the necessary training activity.

Page 23: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

QUESTIONS?

Reference LEDS Rep Chapter 08 – CJIS Security Awareness Training for more information.http://apps.oregon.gov/Application/PDFDownload/OSP/pdfdownload/osp/LEDS_CJIS_Security_Awareness_Training_Documentation.pdf

Page 24: UNDERSTANDING CJIS ONLINE FOR CJIS SECURITY AWARENESS TRAINING & TESTING.

CONTACT INFO

Jennifer Hlad, LEDS Training [email protected]

503-934-2341 (Desk)503-378-2121 (Fax)

Greg Verharst, CJIS Information Security Officer

[email protected]

503-378-3055 Ext. 55002 (Desk)

503-364-2661 (Fax)