Polk County Sheriffs Office Success Story
Published on: Mar 4, 2016
Transcripts - Polk County Sheriffs Office Success Story
A Flexible Foundation for CJIS Compliance for Polk County Sheriff’s OfficeINTRODUCTIONThe Polk County Sheriff’s Office (PCSO), located in Central Florida is responsible forlaw enforcement within one of Florida’s largest counties—and it takes its leadershipin the county seriously. The Sheriff’s Office is spearheading an effort to have all lawenforcement, fire and EMS agencies within the county use common applications in anintegrated public safety system for improved information sharing and efficiency.THE BUSINESS CHALLENGE COMPANY • Polk County Sheriff’sIn addition, the PCSO was looking for ways to comply with the FBI’s regulations Office, Floridafor connecting with the Criminal Justice Information Services (CJIS) systems. Lawenforcement agencies around the country access this vital data, and the FBI • 1800 employeeshas mandated that all agencies accessing those databases meet the followingrequirements. APPLICATIONS • By September 2010: Enforce unique IDs and strong passwords • Public safety and • By September 2010: Implement “Advanced Authentication” like fingerprint biometrics, smart cards general administration or proximity cards, soft or hard token plus password to secure authentication. Some agencies can wait until 2013 if the system being used to access CJI data has not been procured or upgraded applications anytime after September 2005. Please contact your State’s ISO for specifics. CHALLENGESAs the PCSO deployed a new suite of public safety systems applications, they lookedfor ways to address the challenges of managing multiple logins. According to Tom • Inefficiencies andRowles, Enterprise Support Supervisor at Polk County Sheriff’s Office, “Employees insecurities of multiplewere already struggling with many accounts to manage. Requiring complex passwords loginsand strong authentication would only make it worse. We knew that we couldn’t • Budget constraintsimplement advanced authentication until we’d solved the single sign-on problem.” • FBI requirements forThe IT Team set out to find a single sign-on solution that would meet their immediate CJIS accessand longer-term needs, by: • Offering single sign-on to dozens of applications, integrated with Active Directory RESULTS • Enforcing complex password policies for CJIS compliance • Supporting multiple strong authentication technologies • Flexible, scalable • Scaling to support other law enforcement and fire agencies in the county platform for CJIS complianceTHE IMPRIVATA ONESIGN® SOLUTION • Reduced helpdeskAfter evaluating different solutions, the IT Team at the PCSO purchased Imprivata callsOneSign through its reseller, Tribridge. According to Rowles, “There was nocomparison—the others couldn’t do a fraction of what Imprivata can do.” • Streamlined access to public safetyThe PCSO bought three appliances: two for production and one for the disaster applicationsrecovery site. They used a phased deployment, starting with individuals in IT androlling out to other administrative departments before deploying to deputies in thepatrol cars.The PCSO is sharing its deployment of the integrated systems applications with all ofthe public safety agencies in the county, including other law enforcement agencies,fire departments and EMS agencies. Once the OneSign deployment was in place,they started working to roll out OneSign to these other agencies as well. The finaldeployment will support around 2500 users, and dozens of applications in addition tothe public safety applications.
BEFORE IMPRIVATA ONESIGN AFTER IMPRIVATA ONESIGN Phase 1 compliance demonstrated, Phase 2 implemented as Difficulty meeting CJIS compliance deadlines budgets allow Password-related help desk calls Fewer help desk calls frees IT time for other services Difficulty demonstrating application access policies for accreditation, Automated auditing and reporting of all application access complianceTHE RESULTS: A PLATFORM FOR CJIS COMPLIANCE “CJIS compliance canOneSign was an immediate success in the field because it addresses the seriousproblem of managing dozens of different logins. Says Rowles, “Not only do the be daunting. Withdeputies not have to remember different passwords, but OneSign automatically logs Imprivata OneSign,them into their applications. We’ve heard nothing but praise for that.” police departmentsThe PCSO IT Division has also benefited from self-service password resets; the small can put anService Desk staff no longer needs to handle dozens of password reset requests each infrastructure in placeday. for compliance whileBut more importantly, Imprivata OneSign has given Polk County Sheriff’s Office aflexible and scalable platform for CJIS compliance. solving the immediate problems of managingCJIS Phase 1 compliance: With the single sign-on and authentication policies inplace, the department is able to address the first phase of CJIS compliance: ensuring logins to dozens ofunique IDs and complex passwords for accounts that access the FBI CJIS systems. applications.”Before OneSign, this compliance was difficult to enforce and audit. According toRowles, “With some of the applications, we didn’t have the ability to enforce strong -Tom Rowlespasswords. With OneSign, we can do that.” Enterprise Support Supervisor Polk County Sheriff’s OfficeCJIS Phase 2 compliance: OneSign supports a variety of strong authenticationmethods that the IT team can implement to comply with the second phase of CJISrequirements, due by 2013. With OneSign in place, departments can phase in strongauthentication as their budgets allow. Says Rowles, “We’re splitting the cost so wedon’t have one large equipment expenditure in a single fiscal year.”The key take-away, according to Rowles, is that handling the CJIS compliance issue iswithin reach, and can offer immediate benefits. “CJIS compliance can be daunting.With Imprivata OneSign, police departments can put an infrastructure in place forcompliance while solving the immediate problems of managing logins to dozens ofapplications.”1 877 ONESIGN | 1 781 674 2700 | www.imprivata.comCopyright © 2011 Imprivata, Inc. All rights reserved. Imprivata and OneSign are registered trademarks of Imprivata, Inc. in the U.S. and other countries.The Application Profile Generator and OneSign Agent are trademarks of Imprivata, Inc. All other trademarks are the property of their respective owners.MKT-SS-POLK-Ver1-03-2011