Security and accessibility controls
Controls mapped
9
5 built in, 4 from the deployment
Paginated reports checked
6
WCAG 2.1 AA, 6 criteria each
Pass WCAG 2.1 AA
6
of 6
Audit records
10+
most recent shown below
CJIS Security Policy controls
| Control | Name | Policy area | How it is met | Provided by |
|---|---|---|---|---|
| AC-3 | Access enforcement | Access Control | Generated paginated reports list only the agencies mapped to the signed-in user; generated semantic models carry an agency row-level security role. | Built in |
| AC-6 | Least privilege | Access Control | Validation reads source and target with read-only connections; no write access to either reporting database. | Built in |
| AU-2 | Event logging | Audit and Accountability | Opening a CJI comparison, downloading evidence and downloading generated reports are recorded. | Built in |
| AU-3 | Content of audit records | Audit and Accountability | Each record holds time (UTC), user, event, workspace, object, parameters and outcome. | Built in |
| AU-11 | Audit record retention | Audit and Accountability | The audit trail and validation evidence are kept with each release; retention follows the agency schedule, at least one year. | Deployment |
| CM-3 | Configuration change control | Configuration Management | Every generated report traces to its family and source reports, and each release carries its validation evidence. | Built in |
| IA-2(1) | Multi-factor authentication | Identification and Authentication | Sign-in through Microsoft Entra ID with multi-factor authentication, limited to CJIS-trained users. | Deployment |
| SC-8 | Transmission confidentiality | System and Communications Protection | TLS 1.2 or later between users, the Workbench and both reporting platforms. | Deployment |
| SC-28 | Protection of information at rest | System and Communications Protection | Workspaces and evidence stored on encrypted volumes using FIPS 140 validated modules, inside the agency network. | Deployment |
Recent audit records
| Time (UTC) | User | Event | Object | Parameters | Outcome |
|---|---|---|---|---|---|
| 2026-11-04 01:33:50 | workbench.user | Downloaded generated report | F026 Analysis 37.tmdl | Success | |
| 2026-11-04 01:29:09 | workbench.user | Downloaded generated report | F005 Group B Arrest Report.rdl | Success | |
| 2026-11-04 01:29:09 | workbench.user | Downloaded generated report | F006 Analysis 32.tmdl | Success | |
| 2026-11-04 01:29:08 | workbench.user | Downloaded generated report | F003 Clearance Rate by Offense.rdl | Success | |
| 2026-11-04 01:29:08 | workbench.user | Downloaded generated report | F011 Analysis 16.tmdl | Success | |
| 2026-11-04 01:29:07 | workbench.user | Downloaded generated report | F007 Vehicle Crime Summary.tmdl | Success | |
| 2026-11-04 01:29:06 | workbench.user | Downloaded generated report | F022 Analysis 44.tmdl | Success | |
| 2026-11-04 01:29:06 | workbench.user | Downloaded generated report | F009 Analysis 39.tmdl | Success | |
| 2026-11-04 01:29:05 | workbench.user | Downloaded generated report | F002 Monthly Crime Trend.tmdl | Success | |
| 2026-11-04 01:29:04 | workbench.user | Downloaded generated report | F001 Part A Offense Counts.rdl | Success |