NCIC Terminal Agency Coordinator (TAC) Roles and Audit Responsibilities 3

Question 1

The TAC is responsible for ensuring that what specific type of security screening is completed for all personnel with NCIC access?

Accepted Answer

A CJIS-compliant background investigation including fingerprint-based criminal history check

Answer

CJIS Security Policy requires a fingerprint-based criminal history background check for all personnel with access to Criminal Justice Information, including NCIC — the TAC ensures this is completed.

Question 2

What is the TAC's responsibility when the agency receives a policy update or change from the CJIS Systems Agency?

Accepted Answer

Review the policy change, determine its operational impact, update agency procedures accordingly, train affected personnel, and ensure implementation

Answer

When policy updates are received, the TAC must review them, assess their operational impact, update agency procedures, train affected personnel, and ensure timely implementation.

Question 3

What records must a TAC maintain to demonstrate compliance with NCIC user access controls?

Accepted Answer

Individual user access logs, training completion records, signed user agreements, and documentation of access terminations when personnel leave or change roles

Answer

TACs must maintain individual user records including access logs, training documentation, user agreements, and records of access modifications or terminations to demonstrate compliance with access control requirements.

Question 4

What is the TAC's role when a law enforcement officer reports that they may have released NCIC information to an unauthorized person?

Accepted Answer

Treat the disclosure as a security incident, conduct an initial assessment, document findings, and report to the CSA as required by the CJIS Security Policy incident response requirements

Answer

Potential unauthorized disclosure of NCIC information must be treated as a security incident, documented, assessed, and reported to the CSA in accordance with CJIS Security Policy incident response requirements.

Question 5

How does a TAC verify that the agency's NCIC transactions are being used appropriately and not for personal inquiries?

Accepted Answer

By regularly reviewing transaction logs and comparing them against documented law enforcement activities (incidents, CAD records, arrests) to identify transactions without a documented law enforcement purpose

Answer

The TAC audits transaction logs by comparing NCIC queries against documented law enforcement activities to identify transactions that lack a documented official purpose — a key indicator of potential misuse.

NCIC - National Crime Information Center Certification Practice Test

NCIC - National Crime Information Center Certification Practice Test

NCIC Terminal Agency Coordinator (TAC) Roles and Audit Responsibilities 3