HomeMy WebLinkAboutContract No. 2014-2579 Mgmt Agreement 2015lu KIa -T"� ►/ ► ► u
This Agreement is between the City of Columbia Heights Police Department; Columbia Heights,
Minnesota and the City of Roseville, Minnesota.
Agreement
Term of Agreement
1 Effective date: This Agreement is effective on the date the last signature is obtained.
2 Expiration date: This Agreement ends upon termination of the Information Technology Shared
Service Agreement between the parties.
2 Scope of Agreement
The parties acknowledge that the City of Columbia Heights Police Department has a need, as
part of its government function, to send and retrieve data to the Federal Bureau of Investigation
(FBI) and that the City of Roseville provides information technology services that support those
transactions.
The FBI provides a number of systems and services for use by criminal justice agencies around
the country for criminal justice purposes. The FBI has adopted the Criminal Justice Information
Services (CJIS) Security Policy dated February 9, 2011 (Security Policy) that sets forth a number
of requirements the City of Columbia Heights Police Department must meet in order to connect
to the FBI's criminal justice information repositories and functionalities. A copy of the 2011
version of the Security Policy is attached and incorporated by reference, as are the International
Justice and Public Safety Network (Nlets) requirements. The Bureau of Criminal Apprehension
(BCA) at the Minnesota Department of Public Safety has adopted policies that further inform
the City of Columbia Heights Police Department how the requirements are to be met and those
policies are attached and incorporated by reference. Any future updates to these policies are
automatically incorporated into this agreement and the City of Columbia Heights Police
Department will provide the City of Roseville with a copy of the updated version.
The Security Policy requires that each state have a CJIS Systems Agency (CSA) - a criminal
justice agency that provides the single connection point for criminal justice agencies in that state
to the FBI. The BCA is the CSA for Minnesota. The Security Policy also requires that each
CSA has a CJIS Systems Officer (CSO) who is an employee of the CSA and an Information
Security Officer (ISO). The Security Policy requires that each criminal justice agency have a
Local Agency Security Officer (LASO).
The Security Policy requires that when criminal justice functions, regardless of location, are
performed by a non - criminal justice agency (NCJA); there must be a management control
agreement. Because the City of Roseville is a NCJA, this management control agreement is
required.
The City of Roseville provides information technology services. As stated in section 3.2 of the
Security Policy, the responsibility to manage and regulate the security controls remains with the
City of Columbia Heights Police Department.
This Agreement covers the overall supervision associated with the development,
implementation, operation and maintenance of all the City of Columbia Heights Police
Department systems, applications, equipment, design, programming and operational procedures
that contain, are integrated with or derived from criminal justice information (CJI), as defined by
the Security Policy, and that may be subsequently designed or implemented within the City of
Columbia Heights Police Department.
The City of Columbia Heights Police Department has the authority, via managed control, to set
and enforce:
(A) Priorities;
(B) Standards for the selection, supervision and removal of personnel from the City of Columbia
Heights Police Department systems, service and projects.
(C) Policy governing the operation of justice systems, computers, access devices, circuits, hubs,
routers, firewalls and any other components, including encryption, that comprise and support the
criminal justice data communications network operated for the City of Columbia Heights Police
Department and related criminal justice systems. This includes, but is not limited to criminal
justice systems that process or transmit criminal history record or criminal justice information as
those terms are defined in the Security Policy and guaranteeing the priority, integrity and
availability of service needed by the criminal justice community;
(D) Access restrictions so that only authorized personnel, as determined by the City of Columbia
Heights Police Department, have access to or use of the City of Columbia Heights Police
Department systems and services;
(E) Compliance with all rules and policies of the City of Columbia Heights Police Department,
the International Justice and Public Safety Network (Nlets), BCA policy and the Security Policy
in the operation of all systems and services and for all information received, stored or
transmitted. This includes a requirement to be audited as provided in these policies and rules.
These policies are the threshold that must be met with respect to the operations and systems
governed by this Agreement.
To ensure the security of the City of Columbia Heights Police Department systems, services and
projects that contain, are integrated with or derived from CJI, the City of Roseville employees
will submit to the same background check at the time of hire that the City of Columbia Heights
Police Department employees must meet. These initial checks include a national, fingerprint-
based criminal history records check. Costs of personnel screening for all the City of Roseville
employees assigned to the City of Columbia Heights Police Department under this Agreement
will be the responsibility of the City of Roseville.
All systems, devices, and infrastructure containing, integrated with or derived from CH will be
built, operated and maintained in compliance with Security Policy and BCA policy
requirements. The LASO will participate in all discussions and sessions concerning the
development of or change in the City of Roseville requirements related to this Agreement and
will provide information to the City of Roseville about the impact of the proposals on the City of
Columbia Heights Police Department's systems, services and projects. The City of Roseville
must provide the City of Columbia Heights Police Department with all City of Roseville
policies that might apply to the City of Columbia Heights Police Department, including any
updates. The City of Columbia Heights Police Department will have 60 days to determine if the
City of Roseville policy is more stringent.
The City of Columbia Heights Police Department is the final authority to determine operational
policies and interpretation and to determine if the City of Roseville policies are more stringent.
All operational policies will be provided to the City of Columbia Heights Police Department by
the City of Roseville in writing. Notice of a required change will also be provided in writing
and will be sent at least 30 days in advance of the required implementation date. The notice
requirement does not apply in the event of an emergency which is defined for purposes of this
Agreement as an event or series of events that have so negatively affected operations as to
jeopardize public and officer safety.
Compliance with access restrictions established by the Security Policy, BCA policy and the City
of Columbia Heights Police Department will be documented by the City of Roseville to show
each separate, unique access to the City of Columbia Heights Police Department systems and
infrastructure. This documentation will be provided to the City of Columbia Heights Police
Department on request and any violation of the access restrictions is grounds for employee
discipline and may independently result in the CSO revoking access for the individual. Current
logging of system, server and physical access to the server rooms, regardless of location, will
meet the terms of this performance measure. New logging requirements will be mutually agreed
to by the parties.
In addition to the documentation of all policies and changes in policies, the City of Columbia
Heights Police Department and the City of Roseville agree to document all standards, policies
and procedures that govern the operation of City of Columbia Heights Police Department
systems in support of criminal justice agencies in Minnesota. The setting of priorities and the
resolution of issues will be documented. All documentation will be available to the FBI or the
BCA during any audit or on request.
3 Consideration and Payment
As covered in the Information Technology Shared Service Agreement.
4 Authorized Representative
The City of Columbia Heights Police Department's Authorized Representative is Chief of
Police Scott Nadeau, 825 41" Avenue NE, Columbia Heights MN 55421, or his successor.
The City of Roseville's Authorized Representative is Terrence Heiser, 2660 Civic Center Drive,
Roseville MN 55113. Email address of network.managerkmetro- inet.us or his successor
5 Amendments
Any amendment to this Agreement must be in writing and will not be effective until it has
been executed and approved by the same parties who executed and approved the original
Agreement, or their successors in office.
6 Liability
Each party will be responsible for its own acts and behavior and the results thereof.
7 Termination
Either party may terminate this Agreement at any time, with or without cause, upon 30 days'
written notice to the other party.
1. City of Columbia Heights Police Department
�_.
By: - IL
Na 1�C�
itle:
Date:C!} lJ
we
By:
Nan
Title: i — " pl�jAc:° iC
Date: m / ° ! ,
4