Item 11 - Joint Agreement with OC for the 800MHz Countywide Coordinated Communications System (CCCS)

Home Browse Search

Attachment A - Joint Agreement for 800 MHz CCCS Page 77 of 83 The System's network is protected from other data networks by isolation or by using System manufacturer specified and configured firewall with the approval of the Lead Agency. All remote access points to the System are kept secure and are coordinated with the Lead Agency. Passwords protect the System and subsystem equipment for the purpose of preventing unauthorized access to equipment. The Lead Agency issues and manages the passwords. User login accounts are protected with passwords providing an appropriate level of protection. If a password is suspected of being compromised, it must be immediately updated or the user account will be disabled pending resolution. External devices (computers, modems, routers, data storage, etc.) shall not be connected to the System network, computers, or consoles without the approval of the Lead Agency Director. Any such device must also be supplied, supported, and maintained by the user Agency's Information Technology department or service provider to ensure the most current device security software and virus protection is in place. At no time will any personally owned device be connected to any port or connector on the System. Any such action may result in the immediate revocation of access privileges for the offender and/or agency. It is recommended that computers used for programming or maintenance not be connected to the internet to help reduce possibility of virus infection. A `Group Policy' shall be implemented on the System to prevent the use of external USB ports on all dispatch consoles. Procedure All agencies, contractors, and personnel that require access to Lead Agency controlled sites, equipment or networks must pass a comprehensive background check before access is allowed and must be accompanied by Lead Agency staff while on site. Violations of System security policy or procedures may jeopardize the System and result in the loss of a technician's, agency's or vendor's privileges to access the System. System documentation is classified as'Restricted Information'. Management The Lead Agency Director is responsible for the network, equipment, and site security of the System. 8.3 Software, Firmware and Document Security Purpose or Objective Establishes the minimum security measures and procedures to protect the integrity of the System software and programming.