Microsoft signs CJIS Security Addendum for Oregon
I was honored to have the opportunity to present on the subject of the Liability of the Data Breach (and how to prevent it) at the Oregon CJIS User Conference in Bend last week. In the conference opening keynote, Major Tom M. Worthy, Oregon State Police, announced “The Oregon State Police (OSP) is pleased to announce to the Oregon CJIS community that OSP and Microsoft have agreed to a security control agreement that meets every requirement of the FBI’s CJIS Security policy. This agreement gives Oregon agencies additional hosting options that enhance security while meeting their business requirements pertaining to Criminal Justice Information.”
After a thorough review of Microsoft’s operational controls, physical security, access and identity procedures and other requirements of CJIS Security Policy v5.5, the Oregon CJIS Systems Agency and Microsoft finalized a security control agreement enabling state and local law enforcement agencies to utilize Microsoft’s hyper-scale Office 365, Azure, and CRM for Government cloud computing solutions with Criminal Justice Information. Oregon is the 23rd state which Microsoft has attested meeting the applicable CJIS Security Policy requirements with a signed CJIS Security Addendum.
Attending the conference were over 330 law enforcement experts who are responsible for ensuring their agency is found compliant with the CJIS Security Policy v5.5. This elite group of professionals are responsible for the security and access controls for the Law Enforcement Data Systems (LEDS) in Oregon.
In addition to me having the honor of strategizing with Oregon leaders in law enforcement on how to use technology to enhance their ability achieve the goal of citizen safety in the state, they were excited to see in person Microsoft’s commitment to the mission of Justice and Public Safety. The Microsoft Advanced Patrol Platform (MAPP) was on-site for demonstration. It is equipped with specialized video management capability, enables military, law enforcement, and emergency personnel to track case management performance and crime statistics and, in doing so, achieve a new level of transparency within and between agencies.
In summary, through dialog with Oregon law enforcement, it was established that with the new challenges law enforcement is confronted with in their daily responsibility of protecting people, trust and technology are uniting as important standards for selecting solutions to advance the effectiveness of public safety.