The URL can be used to link to this page

Home My WebLink AboutC20140171 Contract Modification 1 SKAGIT COUNTY Amendment# A20140139 Page 1 of 5 AMENDMENT#1 ORIGINAL AGREEMENT#C20140171 City of Anacortes, hereinafter called "Agency", and Skagit County, hereinafter called "County", agree to amend Agreement No. C20140171 , as set forth below under "Terms of Amendment". TERMS OF AMENDMENT: Skagit County shall provide in addition to services defined in the original Agreement the Spillman Public Safety Insight Broker Service as defined following. 8 SPSS Insight Service [23] — Skagit County Law Enforcement Agencies 8.1 Purpose The parties of this agreement intend to share Law Enforcement information, inclusive of Criminal Justice Information (CJI) with Agency. This agreement provides guidance for the creation, viewing, modification, transmission, dissemination, storage and destruction of CJI data. This agreement applies to the Agency and its contractors with access to, or who operate in support of Agency. 8.2 Service Scope This service provides the capability of doing law queries against participating agencies with Spillman Systems. The system is available to authorized Law Enforcement Agencies only. This support shall include: • Configuration, management and operation of the Insight Query Module • Network Security system support for secured encrypted access to participating agencies as required. • Insight Broker Server support, repair and Management • Security configuration for authorized law enforcement agencies within the boundaries of Skagit County, limited to two changes per year. 8.3 Administrative Responsibilities Agency and Skagit County will develop mutually and separately appropriate procedures for transmission, dissemination, storage and destruction of CJI data. 1. Agency shall determine if its criminal justice information shall be made available to the Insight Service network by providing direction in a memorandum to the County that it wishes to provide its information. By default none of the Agencies data will be shared with other Insight partners. 2. Agency has formalized written procedures for the following, if applicable: a. Handling and storage of information to protect that information from unauthorized Page 1 of 5 I disclosure, alteration or misuse. b. Password Management c. Storage of CJI data d. Destruction of CJI data 3. Agency shall apply appropriate administrative, technical, and physical safeguards to insure the security and confidentiality of records and to protect against any anticipated threats or hazards to their security or integrity. 4. Agency is responsible for compliance to technical standards as set forth in the CJIS Security Policy. 5. Agency will conduct periodic self-audits to ensure compliance with CJIS Security Policy. 6. Agency will ensure all appropriate staff members are trained according to state and federal requirements. 8.4 Technical Roles and Responsibilities Agency must comply with and enforce system security. Agency shall have someone designated as the security point of contact (POC). Security POC's shall be responsible for the following: 1. Identifying the user of the hardware/software and ensuring that no unauthorized users have access to the same. 2. Identifying and documenting how the equipment is connected to the Insight Service. 3. Ensuring that personnel security screening procedures are being followed as stated in the CJIS Security Policy. 4. Ensuring that appropriate hardware security measures are in place. 5. Supporting policy compliance and keeping County informed of security incidents. 6. Notifying County of a change in the technical POC at your Agency. Physical Security A physically secured location that is subject to criminal justice agency management control security addendum and which contain hardware, software, and/or firmware (e.g., information system servers, controlled interface equipment, associated peripherals or communications equipment, wire closets, patch panels, etc.) that provide access to the CJIS sensitive facilities and restricted/controlled areas shall be prominently posted and separated from non-sensitive facilities and non-restricted/controlled areas by physical barriers that restrict unauthorized access. All personnel with access to computer centers, CJI, or areas where CJI information is housed shall either be escorted by authorized personnel at all times or receive a fingerprint-based background check. All personnel must review security awareness training within six months of their appointment or assignment. Personnel Security To verify identification, state of residency and national fingerprint-based record checks shall be conducted within 30 days of initial employment or assignment for all personnel who have authorized access to FBI CJIS information and those who have direct responsibility to configure and maintain computer systems and networks with access to FBI CJIS information. Agency shall use the data supplied by the Insight service only for the authorized purpose Page 2 of 5 ' intended. Agency shall not use this data for any other purpose and shall not disseminate this data with any other parties unless required by law. Security Incident Reporting Agency shall report security incidents that result or may result in the unauthorized disclosure of CJI data to the County and Washington State Patrol. 8.5 Compensation For law enforcement agencies using this service who reside within Skagit County's boundaries, the metric shall be the number of Spillman accounts in use by that agency. 8.6 Data Limitations The County makes no warranty, expressed or implied, concerning the integrity of information provided or obtained through the SPSS Insight Service including the content, accuracy, currency or completeness, or concerning the results to be obtained from queries or use of the data. The SPSS Insight Service is provided "as is" and with all faults. The County makes no warranty of fitness for a particular purpose, and no representation as to the quality of any products supplied to the Agency. No employee or agent of the County or the Agency is authorized nor may waive or modify this paragraph. 8.7 Agency Responsibilities The Agency shall be a Criminal Justice Agency as defined by the Criminal Justice Information Services (CJIS) Security Policy Version 5.3, Section 3.2 or subsequent released versions of this policy. No information shall be released to a non-Criminal Justice Agency that is derived from the Insight Broker service without specific permission of the agency from which the information was derived. 8.8 Service Classification This service is rated to process Category 4 information. This service is rated to support Criminal Justice Information as defined in the CJIS Security Policy Version 5.3 or subsequent versions of that policy. This services is not rated to support federally protected Medical Information covered under the Health Insurance Portability and Accountability Act (HIPAA) 8.9 Indirect Technical Services The following indirect technical services are utilized by this service a) Data Center Service As such an allocation of the cost of the service will be part of the service costs.. Page 3 of 5 All other terms and conditions of the original contract shall remain in effect. Date: Se Dt 13, , 2014 GOVERNMENT AGENCY: City of Anacortes Signature of u rized Signatory d -\ � "t'TS Pnn name Mailing Address: PO Box 547 904 6th Street Anacortes, WA 98221 Page 4 of 5 l DATED this 13 day of CDC-(-obe✓ , 2014. BOARD OF COUNTY COMMISSIONERS SKAGIT COUNTY, WASHINGTON 1;7Y\-' VeZey- loy„ Wesen, Chair )-02Auliqj Kenneth A. Dahlstedt, Commissioner -- idler/Atart4E3/14Ca/C-r^- Attest: Sharon D. Dillon, Commissioner & lG (a-- Clerk of the Board For contracts under $5,000: Authorization per Resolution R20030146 Recommend County Administrator Skagit County Sheriff Michael Almvig, Inform tion S rvices Approved as to form: ABC__.([O . QD 11\ 1 Civil Deputy g P Y Prosecuting Attorney Approved as to indemnification: 0— Risk M ager Approved as to budget: Budget& Finance Di or Page 5of5I