Terminal Agency Coordinator (TAC) Roles and Audit Responsibilities Flashcards

The TAC is responsible for ensuring that what specific type of security screening is completed for all personnel with NCIC access?

Answer: A CJIS-compliant background investigation including fingerprint-based criminal history check

CJIS Security Policy requires a fingerprint-based criminal history background check for all personnel with access to Criminal Justice Information, including NCIC — the TAC ensures this is completed.

What is the TAC's responsibility when the agency receives a policy update or change from the CJIS Systems Agency?

Answer: Review the policy change, determine its operational impact, update agency procedures accordingly, train affected personnel, and ensure implementation

When policy updates are received, the TAC must review them, assess their operational impact, update agency procedures, train affected personnel, and ensure timely implementation.

What records must a TAC maintain to demonstrate compliance with NCIC user access controls?

Answer: Individual user access logs, training completion records, signed user agreements, and documentation of access terminations when personnel leave or change roles

TACs must maintain individual user records including access logs, training documentation, user agreements, and records of access modifications or terminations to demonstrate compliance with access control requirements.

What is the TAC's role when a law enforcement officer reports that they may have released NCIC information to an unauthorized person?

Answer: Treat the disclosure as a security incident, conduct an initial assessment, document findings, and report to the CSA as required by the CJIS Security Policy incident response requirements

Potential unauthorized disclosure of NCIC information must be treated as a security incident, documented, assessed, and reported to the CSA in accordance with CJIS Security Policy incident response requirements.

How does a TAC verify that the agency's NCIC transactions are being used appropriately and not for personal inquiries?

Answer: By regularly reviewing transaction logs and comparing them against documented law enforcement activities (incidents, CAD records, arrests) to identify transactions without a documented law enforcement purpose

The TAC audits transaction logs by comparing NCIC queries against documented law enforcement activities to identify transactions that lack a documented official purpose — a key indicator of potential misuse.

When an agency is found to be non-compliant in a CJIS triennial audit, what is the TAC's primary responsibility in the corrective action process?

Answer: The TAC leads the development and implementation of a corrective action plan addressing all audit findings, tracking progress, and reporting to the CSA until all findings are resolved

Following a non-compliant audit finding, the TAC leads the corrective action planning and implementation process, tracking progress until all findings are resolved to the CSA's satisfaction.