Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Information Security topic
No spam. Unsubscribe anytime.
County adopts mobile-device policy to meet CJIS requirements
Summary
The commission unanimously adopted Policy 8-60, restricting CJIS data access on personal devices and limiting some county SaaS access to county-owned devices to comply with FBI CJIS rules, a move county IT staff said is necessary for the upcoming audit.
Uintah County adopted Policy 8-60, a mobile device and management policy designed to meet FBI Criminal Justice Information Services (CJIS) audit requirements.
"No personal device can have CJIS data, access CJIS data, view CJIS data," Ryan Matson (S9) said, explaining that only certain county-owned devices will be permitted to access CJIS information and that those devices must meet more stringent security controls. He said this change will also affect some county software-as-a-service applications, which will be accessible only from county-owned devices under the new policy.
Commissioners said they reviewed Policy 8-60 in an earlier work session and expressed support. Commissioner (S4) moved to approve the policy as presented, and the Chair called the vote with commissioners recording 'Aye' responses; the motion passed.
Why it matters: CJIS compliance governs how law enforcement and county systems handle criminal justice information; adopting the policy is a precondition to passing the county's CJIS audit and continuing authorized access to that data.
Next steps: policy implementation details and device provisioning were not specified in the transcript; staff said they had reviewed the policy and were available to answer further questions.
