Security and accessibility controls
CJIControls mapped
9
5 built in, 4 from the deployment
Paginated reports checked
116
WCAG 2.1 AA, 6 criteria each
Pass WCAG 2.1 AA
116
of 116
Audit records
10+
most recent shown below
CJIS Security Policy controls
| Control | Name | Policy area | How it is met | Provided by |
|---|---|---|---|---|
| AC-3 | Access enforcement | Access Control | Generated paginated reports list only the agencies mapped to the signed-in user; generated semantic models carry an agency row-level security role. | Built in |
| AC-6 | Least privilege | Access Control | Validation reads source and target with read-only connections; no write access to either reporting database. | Built in |
| AU-2 | Event logging | Audit and Accountability | Opening a CJI comparison, downloading evidence and downloading generated reports are recorded. | Built in |
| AU-3 | Content of audit records | Audit and Accountability | Each record holds time (UTC), user, event, workspace, object, parameters and outcome. | Built in |
| AU-11 | Audit record retention | Audit and Accountability | The audit trail and validation evidence are kept with each release; retention follows the agency schedule, at least one year. | Deployment |
| CM-3 | Configuration change control | Configuration Management | Every generated report traces to its family and source reports, and each release carries its validation evidence. | Built in |
| IA-2(1) | Multi-factor authentication | Identification and Authentication | Sign-in through Microsoft Entra ID with multi-factor authentication, limited to CJIS-trained users. | Deployment |
| SC-8 | Transmission confidentiality | System and Communications Protection | TLS 1.2 or later between users, the Workbench and both reporting platforms. | Deployment |
| SC-28 | Protection of information at rest | System and Communications Protection | Workspaces and evidence stored on encrypted volumes using FIPS 140 validated modules, inside the agency network. | Deployment |
Recent audit records
| Time (UTC) | User | Event | Object | Parameters | Outcome |
|---|---|---|---|---|---|
| 2026-11-04 01:47:29 | workbench.user | Viewed CJI comparison | Copy of Juvenile Arrests | Agency G, 1/1/2025 to 12/31/2025 | Match |
| 2026-11-04 01:39:48 | workbench.user | Downloaded generated report | F117 Model Report 40.tmdl | Success | |
| 2026-11-04 01:39:47 | workbench.user | Downloaded generated report | F133 Request 097.rdl | Success | |
| 2026-11-04 01:39:46 | workbench.user | Downloaded generated report | F116 Model Report 36.tmdl | Success | |
| 2026-11-04 01:39:43 | workbench.user | Downloaded generated report | F119 Model Report 16.tmdl | Success | |
| 2026-11-04 01:39:43 | workbench.user | Downloaded generated report | F122 Request 144.rdl | Success | |
| 2026-11-04 01:39:41 | workbench.user | Downloaded generated report | F118 Request 104.rdl | Success | |
| 2026-11-04 01:39:40 | workbench.user | Downloaded generated report | F131 Request 002.rdl | Success | |
| 2026-11-04 01:39:39 | workbench.user | Downloaded generated report | F121 Request 080.rdl | Success | |
| 2026-11-04 01:39:39 | workbench.user | Downloaded generated report | F134 Request 132.rdl | Success |