Report On Information Technology Controls At Massachusetts Criminal History Systems Board (mass.gov)
A report by the Massachusetts Office Of The State Auditor
Make a Difference
Your support helps the ACLU defend privacy rights and a broad range of civil liberties.
Massachusetts' Criminal History Systems Board's (CHSB) mission is to provide timely and accurate criminal justice information and services to authorized law enforcement and non-criminal justice agencies and individuals in support of promoting the public safety and security of the Commonwealth of Massachusetts. The law requires that CHSB maintain the Commonwealth's criminal justice information system by disseminating Massachusetts Criminal Offender Record Information (CORI), giving assistance to individuals or families who may be crime victims, and maintaining licensing and firearms transaction records.
The SAO assessed the functional integrity of Criminal Justice Information System (CJIS) and requirements for upgrading the system in order to ensure the accuracy and completeness of the criminal history records; focused on a review of selected internal controls over CJIS, specifically physical security and environmental protection controls over IT resources at CHSB's computer operations and administrative office, system access security, program change control, and on-site and off-site storage of computer-related media; and performed a review regarding the adequacy of controls in place to protect the integrity and confidentiality of personally identifiable information contained in the CJIS database.