Security and accessibility controls
CJIControls mapped
9
5 built in, 4 from the deployment
Paginated reports checked
19
WCAG 2.1 AA, 6 criteria each
Pass WCAG 2.1 AA
19
of 19
Audit records
10+
most recent shown below
CJIS Security Policy controls
| Control | Name | Policy area | How it is met | Provided by |
|---|---|---|---|---|
| AC-3 | Access enforcement | Access Control | Generated paginated reports list only the agencies mapped to the signed-in user; generated semantic models carry an agency row-level security role. | Built in |
| AC-6 | Least privilege | Access Control | Validation reads source and target with read-only connections; no write access to either reporting database. | Built in |
| AU-2 | Event logging | Audit and Accountability | Opening a CJI comparison, downloading evidence and downloading generated reports are recorded. | Built in |
| AU-3 | Content of audit records | Audit and Accountability | Each record holds time (UTC), user, event, workspace, object, parameters and outcome. | Built in |
| AU-11 | Audit record retention | Audit and Accountability | The audit trail and validation evidence are kept with each release; retention follows the agency schedule, at least one year. | Deployment |
| CM-3 | Configuration change control | Configuration Management | Every generated report traces to its family and source reports, and each release carries its validation evidence. | Built in |
| IA-2(1) | Multi-factor authentication | Identification and Authentication | Sign-in through Microsoft Entra ID with multi-factor authentication, limited to CJIS-trained users. | Deployment |
| SC-8 | Transmission confidentiality | System and Communications Protection | TLS 1.2 or later between users, the Workbench and both reporting platforms. | Deployment |
| SC-28 | Protection of information at rest | System and Communications Protection | Workspaces and evidence stored on encrypted volumes using FIPS 140 validated modules, inside the agency network. | Deployment |
Recent audit records
| Time (UTC) | User | Event | Object | Parameters | Outcome |
|---|---|---|---|---|---|
| 2026-11-04 02:04:41 | workbench.user | Viewed CJI comparison | Field Interview Log - Agency F (2024) | Agency F, 1/1/2024 to 12/31/2024 | Match |
| 2026-11-04 02:04:41 | workbench.user | Viewed CJI comparison | Field Interview Log - Agency C (2024) | Agency C, 1/1/2024 to 12/31/2024 | Match |
| 2026-11-04 02:03:55 | workbench.user | Viewed CJI comparison | Field Interview Log - Agency A (Last 90 Days) | Agency A, 7/2/2026 to 9/30/2026 | Match |
| 2026-11-04 02:03:53 | workbench.user | Viewed CJI comparison | Field Interview Log - Agency I (Last 90 Days) | Agency I, 7/2/2026 to 9/30/2026 | Match |
| 2026-11-04 02:02:14 | workbench.user | Viewed CJI comparison | Drug and Weapon Violations - Agency L (2024) | Agency L, 1/1/2024 to 12/31/2024 | Match |
| 2026-11-04 02:02:13 | workbench.user | Viewed CJI comparison | Drug and Weapon Violations - Agency F (2025) | Agency F, 1/1/2025 to 12/31/2025 | Match |
| 2026-11-04 02:02:12 | workbench.user | Viewed CJI comparison | Property Loss Report - Agency B (2026 YTD) | Agency B, 1/1/2026 to 9/30/2026 | Match |
| 2026-11-04 02:02:11 | workbench.user | Viewed CJI comparison | Drug and Weapon Violations - Agency A (2025) | Agency A, 1/1/2025 to 12/31/2025 | Match |
| 2026-11-04 02:02:09 | workbench.user | Viewed CJI comparison | Drug and Weapon Violations - Agency D (2024) | Agency D, 1/1/2024 to 12/31/2024 | Match |
| 2026-11-04 02:02:09 | workbench.user | Viewed CJI comparison | Open Case Aging - Agency G (2026 YTD) | Agency G, 1/1/2026 to 9/30/2026 | Match |