4501:2-10-10 LEADS owned equipment/connected agency owned equipment.

(A) Terminal agencies shall properly maintain and care for LEADS owned equipment. Any malfunction of this equipment requires LEADS be notified as soon as possible. Agency owned equipment used to access LEADS as the primary agency session shall be supported by repair service as required by the LEADS security policy as a minimum.

(B) LEADS owned/leased equipment shall not be changed, modified, turned off, unplugged or rendered inoperable in any manner except in the case of equipment malfunction preventing operation or if directed by LEADS personnel or equipment contract repair personnel. All repairs on LEADS owned and serviced equipment shall be initiated through LEADS. Repairs caused by alterations to or abuse of the equipment such as liquid spills, or other foreign matter and Lazy Susan device damage shall be billed to the user agency.

(C) LEADS owned equipment shall not be changed in any manner or moved from the installed position without permission of the LEADS steering committee chair or persons authorized by the chair to approve such matters. Written notice of any relocation of LEADS owned equipment accessing LEADS or any change request shall be submitted in writing forty-five days in advance of the move. Any relocation charge shall be at the expense of the user agency.

(D) Modifications or additions of any agency owned equipment connected to LEADS shall be approved in writing by the superintendent of the Ohio state highway patrol or persons designated by the superintendent to authorize these changes. Any local area network terminal accessing LEADS shall have the intelligent device, i.e. file server, and its administrator under the management control of a criminal justice agency. The proper agreements (rule 4501:2-10-13 of the Administrative Code) shall be instituted prior to being permitted access to LEADS.

(E) No dial-up access is permitted to LEADS except as approved by LEADS. Dial-up access to agency owned/leased equipment is prohibited while the equipment is on-line with LEADS, except as approved and monitored by LEADS control.

(F) The terminal agency shall notify the LEADS steering committee chairperson in writing at least thirty days in advance of their intention to cancel LEADS service.

(G) Agency owned software is not permitted to be installed in LEADS owned equipment. Agency equipment and/or software believed to be degrading LEADS service shall be disconnected until the problem is resolved.

(H) LEADS owned equipment/software or equipment/software connected to the LEADS shall not be interconnected to other systems or networks without written authorization from the LEADS steering committee chairperson.

(I) LEADS owned equipment/software shall not be used for personal benefit.

(J) All equipment/software use will be monitored continually by LEADS control and randomly by LEADS staff or their representatives. Any misuse shall be cause for administrative sanction and/or criminal prosecution.

(K) All LEADS owned equipment shall be connected through LEADS approved surge protector(s). All agency owned equipment connected to LEADS equipment shall be surge protected by equipment meeting requirements as outlined in the LEADS security policy.

(L) Due to the sensitivity of the information maintained on the LEADS/NCIC/NLETS systems and to comply with NCIC/CJIS security policy it is important steps are taken to safeguard these networks from improper access. LEADS access is not permitted on any system or device which can also access the internet without prior notification to, and approval of, the steering committee chairperson. Prior to any terminal or device which accesses LEADS being capable of internet access, the agency shall provide to the steering committee chairperson documentation of the agency’s method of providing for the security of LEADS. This documentation will be reviewed and written approval shall be issued prior to any device at the agency being capable of accessing both LEADS and the internet. This restriction also applies to networks which have terminals accessing LEADS and others accessing the internet.

Effective: 02/15/2008

R.C. 119.032 review dates: 11/29/2007 and 11/29/2012

Promulgated Under: 119.03

Statutory Authority: R.C. 5503.10

Rule Amplifies: R.C. 5503.10

Prior Effective Dates: 10/10/91, 4/11/94, 10/21/95, 5/27/96, 7/31/98, 7/01/01, 11/01/03, 12/23/04, 9/22/2005