Security and accessibility controls
Controls mapped
9
5 built in, 4 from the deployment
Paginated reports checked
3
WCAG 2.1 AA, 6 criteria each
Pass WCAG 2.1 AA
3
of 3
Audit records
6
most recent shown below
CJIS Security Policy controls
| Control | Name | Policy area | How it is met | Provided by |
|---|---|---|---|---|
| AC-3 | Access enforcement | Access Control | Generated paginated reports list only the agencies mapped to the signed-in user; generated semantic models carry an agency row-level security role. | Built in |
| AC-6 | Least privilege | Access Control | Validation reads source and target with read-only connections; no write access to either reporting database. | Built in |
| AU-2 | Event logging | Audit and Accountability | Opening a CJI comparison, downloading evidence and downloading generated reports are recorded. | Built in |
| AU-3 | Content of audit records | Audit and Accountability | Each record holds time (UTC), user, event, workspace, object, parameters and outcome. | Built in |
| AU-11 | Audit record retention | Audit and Accountability | The audit trail and validation evidence are kept with each release; retention follows the agency schedule, at least one year. | Deployment |
| CM-3 | Configuration change control | Configuration Management | Every generated report traces to its family and source reports, and each release carries its validation evidence. | Built in |
| IA-2(1) | Multi-factor authentication | Identification and Authentication | Sign-in through Microsoft Entra ID with multi-factor authentication, limited to CJIS-trained users. | Deployment |
| SC-8 | Transmission confidentiality | System and Communications Protection | TLS 1.2 or later between users, the Workbench and both reporting platforms. | Deployment |
| SC-28 | Protection of information at rest | System and Communications Protection | Workspaces and evidence stored on encrypted volumes using FIPS 140 validated modules, inside the agency network. | Deployment |
Recent audit records
| Time (UTC) | User | Event | Object | Parameters | Outcome |
|---|---|---|---|---|---|
| 2026-11-04 01:20:30 | workbench.user | Downloaded generated report | F003 Part A Offense Counts.rdl | Success | |
| 2026-11-04 01:20:29 | workbench.user | Downloaded generated report | F001 Burglary by Beat.rdl | Success | |
| 2026-11-04 01:20:29 | workbench.user | Downloaded generated report | F004 Citations by Violation.rdl | Success | |
| 2026-11-04 01:20:28 | workbench.user | Downloaded generated report | F002 Location Type Analysis.tmdl | Success | |
| 2026-11-04 01:20:26 | workbench.user | Downloaded audit trail | audit-trail-public-safety-dashboards.csv | Success | |
| 2026-11-04 01:20:25 | workbench.user | Downloaded validation evidence | validation-evidence-public-safety-dashboards.csv | 10 comparisons |