Terminal Agency Coordinator (TAC) Roles and Audit Responsibilities Flashcards

What is the primary responsibility of a Terminal Agency Coordinator (TAC)?

Answer: To ensure the agency's compliance with all NCIC policies and procedures.

The TAC is the central point of contact for all NCIC matters within an agency. Their core function is to administer the system, ensure users are trained and certified, and maintain the agency's compliance with all state and federal NCIC rules and policies.

According to CJIS Security Policy, how often must an agency's NCIC operations be audited by the state CJIS Systems Agency (CSA)?

Answer: Every three years.

The CJIS Security Policy mandates that CSAs conduct a triennial audit (every three years) of all agencies with access to the system. This recurring audit ensures ongoing compliance with security, training, data quality, and operational standards.

A new officer joins the agency and requires NCIC access. What must the TAC ensure before granting this access?

Answer: The officer has completed required training and passed certification.

Access to NCIC is strictly controlled and requires documented proof of training. The TAC is responsible for verifying that any user has completed all mandatory security awareness and system-specific training and passed certification before they are granted credentials.

During a CSA audit, the auditor finds that the agency's transaction logs are not being properly maintained. Who is ultimately responsible for this finding?

Answer: The head of the agency (e.g., Chief of Police or Sheriff).

While the TAC is responsible for day-to-day administration, the agency head (e.g., Chief of Police, Sheriff) is ultimately responsible and accountable for the agency's adherence to all CJIS and NCIC policies. The TAC works on behalf of the agency head to maintain compliance.

What is a key component of the TAC's role regarding 'hit confirmation'?

Answer: Ensuring the agency has a written directive and follows the 24/7 hit confirmation policy.

The TAC must ensure the agency has a clear, written directive and follows the policy for 24/7 hit confirmation. This involves having procedures to promptly contact the originating agency to verify that a record is still active and accurate before enforcement action is taken.

An agency employee is found to have used the NCIC terminal to run a query on a neighbor for personal reasons. What is this action considered?

Answer: A violation of the 'right to know, need to know' principle and a misuse of the system.

Access to NCIC is strictly limited to official criminal justice purposes, governed by the 'right to know, need to know' principle. Using the system for personal reasons is a serious violation of policy and law that can lead to disciplinary action and criminal charges.