Laserfiche WebLink
Proposal to Provide <br />CJIS Gap Assessment City of South Bend 7 <br />' Data Pratectian Pl W aX socuannyr <br />Ihreat & Vtulneralsility IAardoglarr <br />u„.:.esrintrltia sarm^;ua <br />Secure Sl <br />Security Dt ange Management <br />,,all soc;euuti¢y <br />Lagging and IMonitouing <br />I I Ol�aerahorv; <br />Ilhusirross Goinilllr uilly II'Wan,,:u¢ oruucint ' <br />Secorty Condiguratsan Management ' -third Party Fisk Managernent <br />Uerprl <br />hNrar'tt;r{Ia' ollf"rrlt <br />These domains are divided into unique control categories that contain a series of controls and test <br />procedures. <br />_..--'IIllfl <br />PFI',MND ,.._.. <br />L.&l <br />PefYSll'; I�'#h,IF%Nf,f':: <br />t(I fl Ifll PiFkf^III Vl...^G <br />11' • <f ll ��n <br />r�rJl fl "pi r.r ,; <br />lbhrrrlAGf ININ"I <br />rf 1�%3iH <br />I ` J' .n <br />1'r II�"wit <br />"' ` 'wl" <br />`1 I,I III V Irtl�t'I -P_i lJ <br />I <br />' <br />I AIr, 411WYII CItUNI <br />11tr tit l`71 r I v <br />1..5,:9r DING AIIJI) <br />n'.e <br />I Il ICNI. r CU 0Y <br />' fj mllml <br />INRf INI YfdIdIlWr!! <br />., <br />n.,i,F ei. <br />r.l f�i, "�NF <br />JFrrc;ilc_'A ukum <br />"I'I ,; on <br />If.a1 <br />I I` fYl I 01114;}NS <br />rl ' <br />r ,, lly I+ „,I'14,I lI II'r f,I 1GtIvIf'IC'. <br />l+flAIQA('P lAll:lNII. <br />- <br />r�..�a n. <br />1 f•.inl ;, liu=Rrrh '-1 I^.� i,f re <br />Organizations can identify those regulatory requirements and industry standards they wish to include, and <br />the CICF allows Crowe to dynamically create a custom risk and control universe specific to each <br />organization. <br />Project Scope <br />Based on our understanding of your needs, Crowe will utilize the CICF to complete a CJIS Gap <br />Assessment for South Bend. CJIS consists of thirteen policy areas, each of which will be evaluated as <br />part of this engagement: <br />• Policy Area 1—Information Exchange Agreements <br />• Policy Area 2—Security Awareness Training <br />• Policy Area 3—Incident Response <br />• Policy Area 4—Auditing and Accountability <br />• Policy Area 5—Access Control <br />• Policy Area 6—Identification and Authentication <br />• Policy Area 7—Configuration Management <br />• Policy Area 8—Media Protection <br />• Policy Area 9—Physical Protection <br />02019 Crowe I..I...I' vwuw, crowe.. cam <br />