NCIC Messaging System 2 — Questions and Answers

Question 1: What is the primary purpose of the NCIC administrative message capability?

To transmit criminal history records between states
To allow authorized agencies to send operational messages to other NCIC-connected agencies (Correct answer)
To broadcast AMBER Alerts to the public
To submit record modification requests to the FBI CJIS Division

Correct answer: To allow authorized agencies to send operational messages to other NCIC-connected agencies

The NCIC administrative message capability allows authorized agencies to send and receive operational messages to other agencies connected to the NCIC network.

The NCIC messaging system provides a secure, authenticated channel for law enforcement agencies to communicate directly with each other over the NCIC network. Administrative messages are used for purposes such as hit confirmation, record inquiry follow-ups, coordination on wanted persons, and other operational communications. Because the messages are transmitted over the same secure NCIC infrastructure used for record queries, they benefit from the same security protections and create an auditable communication record. The capability is not intended for routine administrative correspondence unrelated to NCIC records or criminal justice matters.

Question 2: Which identifier must be included in all NCIC message transactions to ensure proper routing and accountability?

The operator's personal identification number (PIN)
The Originating Agency Identifier (ORI) (Correct answer)
The terminal's serial number
The state code and county identifier

Correct answer: The Originating Agency Identifier (ORI)

The Originating Agency Identifier (ORI) must be included in all NCIC transactions, including messages, to ensure proper routing and to maintain accountability.

The ORI is the foundation of NCIC transaction accountability. Every query, entry, modification, cancellation, and administrative message must include the sender's ORI so that transactions are properly routed and logged. The ORI links each message to a specific authorized agency, enabling the FBI CJIS Division and state CSAs to audit message traffic, investigate misuse allegations, and verify that only authorized agencies are sending messages over the NCIC network. Messages sent without a valid ORI will be rejected by the system.

Question 3: When using the NCIC messaging system for hit confirmation, which transaction type is used to place a 'locate' on a record?

LOC transaction (Correct answer)
MOD transaction
INQ transaction
CAR transaction

Correct answer: LOC transaction

The LOC (locate) transaction is used to place a locate on an NCIC record, notifying the originating agency that the wanted person, missing person, or property has been located.

When an agency locates a wanted person, missing person, or property that matches an NCIC record, the responding agency enters a LOC (locate) transaction against that record. This transaction serves two purposes: it notifies the originating agency through the NCIC locate notification system that their record has been hit, and it creates an official record of the locate event in NCIC's audit trail. The LOC transaction does not cancel the record — the originating agency retains responsibility for cancellation once they have confirmed the information and determined no further NCIC entry is needed.

Question 4: What does the NCIC message switch do when an agency sends a transaction to another jurisdiction?

It manually routes messages through a central FBI dispatcher
It automatically routes messages to the appropriate agency or state system based on the destination ORI (Correct answer)
It stores all messages in a central repository for 30 days before delivery
It sends a copy of all messages to the FBI for review

Correct answer: It automatically routes messages to the appropriate agency or state system based on the destination ORI

The NCIC message switch automatically routes transactions to the appropriate destination agency or state system based on the destination ORI contained in the transaction header.

The NCIC message switch is the automated routing infrastructure that directs transactions and messages to their intended destinations. When an agency sends a transaction (query, administrative message, locate, etc.) addressed to another ORI or state, the message switch reads the destination identifier and automatically routes the transmission through the appropriate network path to the receiving agency or state system. This automated routing is transparent to the sending agency and operates at near-real-time speed, enabling the rapid information exchange that law enforcement operations require.

Question 5: NCIC messages used for criminal intelligence information must comply with what additional requirement beyond standard messaging rules?

They must be encrypted with an additional layer of encryption beyond standard NCIC security
They must comply with 28 CFR Part 23, which governs the operation of criminal intelligence systems (Correct answer)
They must be reviewed by a supervisor before transmission
They require a court order for transmission over NCIC

Correct answer: They must comply with 28 CFR Part 23, which governs the operation of criminal intelligence systems

Criminal intelligence information transmitted over NCIC must comply with 28 CFR Part 23, which establishes standards for criminal intelligence systems including reasonable suspicion requirements and strict access controls.

28 CFR Part 23 establishes requirements for federally funded criminal intelligence systems, including standards for what information can be collected (requires reasonable suspicion of criminal activity), who can access it, how long it can be retained, and under what circumstances it can be disseminated. When criminal intelligence information is shared over NCIC's messaging infrastructure, these requirements apply in addition to standard NCIC policies. Agencies that improperly enter or disseminate criminal intelligence through NCIC without meeting 28 CFR Part 23 standards risk losing federal funding and NCIC access.

Question 6: How does the NCIC network handle messages addressed to agencies that are temporarily offline or unable to receive transmissions?

Messages are permanently deleted after one failed delivery attempt
Messages are held in a queue and delivered when the destination agency reconnects to the network (Correct answer)
Messages are rerouted to the state CSA for manual delivery
Messages are returned to the sender with an error code

Correct answer: Messages are held in a queue and delivered when the destination agency reconnects to the network

The NCIC network queues messages addressed to temporarily unavailable agencies and delivers them when the destination agency reconnects to the network.

The NCIC message switch uses store-and-forward technology to handle situations where a destination agency is temporarily offline, undergoing maintenance, or experiencing connectivity issues. Messages addressed to that agency are held in a network queue and automatically delivered when the agency's connection is restored. This ensures that time-sensitive communications such as hit confirmations and locates are not lost due to temporary technical issues. Sending agencies should be aware that delivery may be delayed in such circumstances and should follow up by phone for urgent matters if timely delivery is not confirmed.

NCIC Messaging System 2

What is the primary purpose of the NCIC administrative message capability?