w--

C'I
...
o
«U
III
C
:c
-

continued from 'IT on page 13
Law enforcement information systems are a critical compo-
nent to effective policing because information gives law enforce-
ment the ability to solve and possibly prevent crime. The infor-
mation system should enhance and improve police and public
safety but it needs to be shared at local, state and federal levels
to be beneficial.
The complex and wide-ranging responsibilities of a law
enforcement agency require a varied supply of resources and
information systems. The information systems available provide
a multitude of services and, working together, unlimited
amounts of information and tools, which fortify law enforce-
ment Popular applications deployed on a law enforcement net-
workare:
·· Computer Aided Dispatch (CAD)
·· Records Management System (RMS)
MobileComputing
· Automated Field Reporting
Jail Management Systems (JMS)
(AFR)
·
· Geographic Information Systems (GIS)
Computer Mapping and Crime Analysis
·
·
·
Automatic Vehicle Location (AVL)
Automated Fingerprint Identification System (AFIS)
Digital Photography
· Criminal Intelligence (CI)
Implementing the above-mentioned applications requires
law enforce~ent to have a reliable, secure and manageable data
network. Law enforcement networks involve multiple technolo-
gies and should be designed like any other IT Project.
Planning and deploying IT in a law enforcement agency is
not easy, but the benefits are substantial and well worth the
effort. The Standish Group conducted a study (1994) of over
8,000 public and private IT Projects with the following results:
·· 52% of all IT Projects cost 189% of original estimates
Large organizations net only 42% of the original features
and functions in the end product
· 31% of IT Projects are cancelled before completion
· Only 26% of large scale projects are completed on time and
within budget
Technology planning, acquisition and implementation are
not a one-time activity. The process is cyclical in nature follow-
ing the Systems Development Life Cycle ("SDLC"). SDLC is a
process with several phases including planning, procurement,
...
DI
o
implementation, and management; however, the successful
iii implementation of a system does not signal the end of a project.
"'
r:: Systems implementation signals the beginning of a new phase of
:c
.... evaluating a recently adopted system and, planning for system
w
maintenance, upgrade, enhancements and replacement. Law
~
U enforcement executives must be cognizant of the fact that the
oVI
VI SDLC requires funding in a succession of fiscal budget years.
«w
:I:
I-
.
Implementing a successful IT Project effectively also
depends on the chief executive ensuring that key elements are
included in the project management plan. First, the organiza-
tion must have a strategic business plan that articulates the
agency's mission, goals and objectives. It is imperative that the
chief executive and management recognize the mission-critical
role of IT in the criminal justice system, and act accordingly to:
· Implement the budgetary practices using lifecycle costing
and the SDLC for continual planning, maintenance and
· support of information systems.
Develop a strategic IT vision plan. A strategic vision plan
explains how technology will assist the agency in meeting
its core business mission.
· Take action to implement a plan that strives to meet the
goals of the strategic vision plan through a series of IT
Projects that build the IT capabilities of the agency.
Second, the Project Manager takes responsibility for execut-
ing the plan and assembling a team to manage the project
through completion and evaluation. The Project Manager needs
to ensure the following:
· Identify and define the problem
· Conduct a risk assessment
·· Set realistic goal, objectives and timelines
Develop a thorough project plan
· Negotiate contracts
· Develop structured implementation
·
· Plan training
Establish benchmarks and performance for assessing and
evaluating the project's success
A Business Process Reengineering ("BPR") plan is the
process of examining a business' current methods of operation
and evaluating those methods for streamlining the work-
process. Major IT Projects require substantial dollar investments
and usually support a business change that enhances the current
business process. In many cases, the economic benefits, meas-
ured as return on the capital being invested, can be realized only
through some combination of change or transformation within
the business operation. Ultimately, the success of the BPR
process is measured by the product or service produced and the
resources such as, fiscal, personnel or the time utilized to pro-
duce the end product.
Project Managers must consider not only the infrastructure
of their internal or hard-wired networks but also their external
networks or wireless networks. Simply stated, a network is basi-
cally, two or more computers connected together enabling them
to exchange information and share resources such as, a printer
or a file. A computer network that spans a relatively small area is
called a LANor Local Area Network and is usually confined to a
single building or group of buildings. Several LANs connected by
telephone lines, frame relays, the Internet, fiber optics or radio
waves is called a Wide Area Network (WAN),which is not con-
fined to a small geographical area.
continued on page 15
 continued from 'IT' on page 14
Most LANS connect servers, workstations, personal comput-
ers, and printers (also called nodes). Each workstation or per-
sonal computer has a Central Processing Unit ("CPU") that per-
mits the computer to execute applications, access databases, and
devices anywhere on the LAN.Ethernet, the most common,
Token Ring, Peer to Peer, and AppleTalk are a few of the many
different types of networks and can be differentiated using the
following characteristics:
. Topology: The geometric arrangement of devices on the
network, for example, devices can be arranged in a ring or a
straight line.
. Protocols: The rules and encoding specifications for sending
data that determines whether the network uses a Peer-to-
Peer or Client Server Architecture. Common Protocols
include:
· TCP/IP
· NETBUIE
··
· TokenRing
AppleTalk
·
IPx/SPX
SNA
. Media: Devices can be connected by unshielded twisted pair
(UTP) coaxial cables or fiber optics. Some networks do without
connecting media altogether, communicating instead with radio
waves.
XML or, ExtensibleMark-upLanguage,is a softwarestan-
dard that structures data such as a department's Records
Management System ("RMS"), which creates an opportunity to
share data among different systems. XML is a web-based tech-
< nology that is available to all law enforcement agencies and can
share records management information without having to
rebuild systems. Essentially, XMLsimply utilizes standard-based
data labels that create a bridge between different information
systems.
Today, the most common networks are Ethernet, using the
TCP/IP protocol suite, and connected with unshielded twisted
pair (UTP) cable. Network infrastructure also includes hubs,
bridges, switches, routers, modems, and servers. Servers handle
network tasks such as authenticating users, storing files, manag-
ing printers, and running applications such as database and
email programs. Servers and client computer systems can run
on many different operating platforms such as Windows NT4,
Windows 2000, Linux, UNIX, MACOIS, and Novell Netware, and
soon-to-be released Windows net. Security is generally central-
ized and allows users to have one user account for logging on to
any computer in the network. The most common types of
servers in a law enforcement environment include application,
fax, FTP, Mail, proxy, Telnet and web servers.
I
In order to utilize powerful applications such as computer-
aided dispatch, records management, automated field reporting
and computer mapping, an agency must have a computer net-
work capable of supporting the applications. The primary ele-
ments when planning a data network are capacity, scalability,
reliability, security and manageability. Capacity requires a deter-
mination of the resources required by network users, not only
the agency's needs for the present, but also the future. Network
designs should be scaleable either vertically, by increasing sys-
tem components such as CPU speed or added memory; or, hori-
zontally by adding servers to the network. Security should be
considered in every part of the network design while managea-
bility and reliability can be directly determined by your needs
and risk assessments.
The primary features of a law enforcement network are
Computer Aided Dispatch ("CAD")and Records Management
Systems ("RMS"). CADsystems are an integral tool in modern
policing and the entry point of data in a law enforcement agency.
Call-receivers and dispatchers enter requests for service from the
public through the 911 system; seven-digit telephone lines; and
officer initiated calls. CADallows an agency to automate its call
receiving and dispatching functions, while managing the assign-
ment of units to incidents and requests for service.
Enhancements to CADinclude geo-verifying the callioca-
tion, whether it is a residential address, business or common-
place. The right location is critical to officers in the field to
ensure a timely response. CADsystems can also prioritize calls
for service and make recommendations for unit and resource
dispatching based on post, sectors, beats, nearest or available
units. A CADsystem should also be integrated with RMS to pro-
vide incident location history, people and address advisories,
warrants, firearms, restraining orders and hazards to the user in
a useful display.
RMS collects and stores information generated by calls for
service, police dispatches, investigations and officer contacts.
Information collected can be analyzed, tracked and assist in
managing criminal and non-criminal events. RMS automates the
daily business practices of entering, storing, retrieving, retain-
ing, archiving, viewing and exchanging records, documents,
data, files, intelligence related to persons such as, vehicles,
arrests, warrants, citations, pawn tickets, civil process paper, C1
..
service property and evidence. o
iii
I'll
C
CADand RMS must be integrated to avoid repetitious data
entry. The purpose of a sophisticated CADand RMS system is to
-
:c
improve the accuracy of information and the speed it can be
accessed. A properly implemented CADand RMS system can sig-
nificantly streamline data processing and workflow while
improving the overall quality of information retrieved.
Police organizations can enhance an officer's ability to
CD
u...
continued on page 30
 continued from 'Up On IT' on page 15
access, exchange, create, and receive information through
mobile computing or handheld devices, such as a Personal
Digital Assistant ("PDA"). Wireless devices have revolutionized
the way public safety personnel perform every day tasks, such as
enabling police officers to "walk-the-beat" while staying in con-
tact with headquarters. Information such as intelligence, patrol
alerts, streaming video, pre-plans, mapping, hazardous materials
information and department policies and procedures are impera-
tive to law enforcement. An officer's access to query local, state
and national databases; send and receive email; prepare police
reports; enter field interview information; access policy and pro-
cedures and look up legal statutes is immeasurable. Automatic
Field Reporting ("AFR")produces immediate incident reports
that can be sent for supervisor approval and directly submitted
to the RMS, which increases officer productivity. The software
for AFR offers data integrity checks, drop-down menus, pre-filled
fields, pre-population of multiple forms and automatic error
detection. Today, an officer's patrol car has affectively become a
mobile office through the implementation and assistance of a
mobile computer and/or PDA.
Project Managers must decide what type of wireless connec-
tivity they will utilize to implement a wireless network and the
services geographically available. Wireless technology generally
available include:
· CDPD -Cellular DigitalPacket Data
· CDMA-Code Division Multiple Access
. GPRS -General Packet Radio Service
·· RF-RadioFrequency
Wireless WAN,WiFi, 802.11
-0I It is necessary to confirm with the service provider that
service will be continued in the future; some service providers
haveannounced their intention to cease CDPD serviceover the
next several years.
A Jail Management System ("JMS") is available for larger
agencies and correctional facilities. JMS is designed to manage
these facilities by tracking inmates, inmate processing, classifica-
tion, cell management, medical history, visitor logs, fingerprints,
and mugshots. The Automated Fingerprint Identification System
(AFIS) and digital photography software facilitates digital mug
shots and fingerprints for searches, verifications and identifica-
tion by querying in-house, local, state and federal databases.
Working together, Geographic Information Systems
...
CI
o
("GIS"), computer mapping software, and automated vehicle
n:i location (AVL)provides law enforcement with instantaneous
CO
~ information to respond, prevent, and investigate crime.
:c
.... Dispatchers are able to quickly determine the precise location
w
and the necessary unit that is closest in proximity to the loca-
~
U tion. In the form of layers connected by a common framework,
o
V1
V1 GIS stores information about locations, buildings, common
<:t:
w place names, zip codes, phone numbers, even latitude and longi-
:I:
I- tude. The layering of information allows users to view single
-:
pieces of information about a location or, view selected pieces of
information in layers, which increases the complexity of crime
analysis. The computer generated mapping and GIS (with data
imported from RMS) assist in visualizing crime occurrences and
correlating factors such as school locations, known criminals,
and other related events. Extensive crime analysis allows critical
resources to be used effectively to reduce crime, solve communi-
ty problems and enhance the quality of life for citizens; and deci-
pher criminal activity.
In connection with the location identification of a cell-
phone user, there are two phases that need to be implemented.
Phase I Wireless E911, requires integrating the call receiving
procedure in CADwith GIS and computer mapping; and, it also
requires that the service provider (i.e., AT&T)reports the call-
back number and originating cell site to the 911 operator.
Implementation of phase II wireless E911 is based on FCC
requirements that an address translator feature interprets the
x:i coordinate location into a block range and address, and pos-
sibly a common name based on the distance from the nearest
tower(s). Phase II will revert to Phase I if it is unavailable.
The terror attacks of September 11,2001 highlighted the
necessity of extensive Criminal Intelligence ("CI") systems.
Criminal Intelligence modules are used for the entry, retention,
analysis, and sharing of criminal intelligence data not only to
assist with combating terror but narcotics or other criminal
activity. Users in different jurisdictions can enter a suspect
and/or case-data based on a wide choice of criteria, which can be
queried for information on cases and events. XML is ideal for
intelligence modules; however coordination between federal,
state, county and local agencies is vital for this to be effective.
The physical and logical topology in a data network should
be considered. The following questions can assist in the design
phase:
· Who will use the network?
· Is the network part of a larger network, (i.e. municipal
government) ?
· Will cns information (Le., NCIC 2000) be available on the
network?
· Will the Internet be deployed on the network?
· Will the agency host a web site or email on the network?
· How will the agency share appropriate criminal justice data
with local,state and criminal justice agencies?
It is important to remember that even though computers
may be physically separate from other non-law enforcement
agencies, the network can still be vulnerable if devices are con-
nected or, a service such as the Internet is shared.
Security should be of paramount importance in the design,
deployment, and implementation of any law enforcement infor-
mation system network. The information system and agency's
continued on page 31
 continued from 'Up On IT' on page 30 2) Usersshould never be permitted to installunauthorized
software or devices;
~ operations are at risk if connected to other networks or if a
3) Modems should never be connected to network devices
breach occurs. Unlawful access to criminal justice information
without additional authentication procedures beyond
on the law enforcement network can jeopardize criminal prose-
username, login and password;
cution, investigations and everyday operations of the agency.
4) Critical network components and data should be backed
Strict security policies outlining physical connections to the net-
up regularly and back up media should be stored
work, user guidelines, email policy, Internet usage, network
securely off site;
auditing, backup and disaster recover planning are indispensable
5) Ensure all users have the minimum necessary access to
steps to sustain security.
computers, applications and data to perform their job
related functions;
Antivirus software protects the network and its components
6) Never install unnecessary services on computers and
from viruses, worms, and Trojan horses. The first PC virus was
recorded in 1987; today the number of known viruses is in the
servers;
7) Enforce password complexity and history policies;
tens of thousands. The Microsoft Encyclopedia of Networking
8) Protect the network from external threats as well as
(2000)by Microsoft Press offers the following definitions:
internal threats; and
· Virus: Any piece of code that is deliberately written to cause
9) Always keep operating systems up-to-date by deploying
damage or annoyance to computer users on a network. Tens
of thousands of different "strains" of viruses have been the latest patches, hot-fixes and updates.
detected over the years. The effects of these viruses range
Securing a computer network from every conceivable threat
from harmless messages announcing the presence of an
is impossible; however, computer networks can be successfully
"infection" to malicious deletion of crucial system and data
files. protected from an attack or, at the least, minimally damaged.
Information Technology has made a substantial impact on public
safety agencies by automating processes, increasing productivity,
Types of malicious programs that are not strictly viruses do
streamlining workflow, decreasing emergency response times
not reproduce but can have similar effects, which include:
and increasing community safety. Law enforcement executives
· Trojan horses: Programs that masquerade as other
require diligence in identifying technology needs for their
programs and are typically used to steal credentials or other
agency while supporting the department's efforts fiscally and as
information from a user. I well as through policies. A project should be viewed as a problem
· Worms: Programs that invade meil1.9.ry to destroy files but
scheduled for solution; and solutions are determined by collabo-
are not disk resident. '\
rative efforts of executives, managers, and users. Executives need
· Logicbombs: Programs that are triggered when a certain
to be vigilant to ensure that IT projects are geared to meeting
event or sequence of events occurs.
the agency's mission and strategic goals by clearly defining the
project; getting the right personnel involved; setting realistic,
Malicious programs combining the properties of a virus
obtainable, and measurable goals and objectives; developing a
with one or more of these programs are not easy to categorize.
thorough project plan; accurately assessing risk, structuring
Vigilance in the protection of networks, in conjunction with
implementation; providing adequate training and establishing
anti-virus protection, should be considered mandatory for any
benchmarks and performance metric for assessing and evaluat-
network and continually updated.
ing an IT project's success. Law enforcement agencies should
provide a functional spec for vendors and be prepared to look
The term "firewall" is used when discussing computer net-
outside of their agency for professionals in particular fields such
work security but few people understand what a firewall is or
as, Project Management, Information, Law Enforcement
how it protects you. A firewall is a security perimeter that pro-
tects the network and its resources from malicious attacks to Operations, and Certified Network Engineers. The challenges
and obstacles that present themselves prior to, and during, an IT
, steal, damage, destroy or corrupt the network. Firewalls include
Project will be ubiquitous, but the satisfaction derived from suc-
hardware or software or, a combination of the two, which is the
ideal situation. cess in overcoming them will be well worth the effort. Law
enforcement executives, although not directly, have a responsi-
bility to ensure that work on the operational level of an agency is
Conduct a thorough risk assessment before you create any
performed, safely, efficiently and effectively. A well designed and
security policy. A risk assessment helps balance the risks to your
implemented law enforcement information system will provide
network versus the cost of protecting your information systems.
the front line officers and investigators with the information
A few fundamental security procedures that should be followed
necessary to combat crime, solve problems, and achieve the mis-
with any law enforcement network include:
sion of every law enforcement officer to "protect and serve." (I)
1) Never connect to an external network directly or
indirectly without a security system in place such as, a
firewall; continued on page 321

I
 continued from 'IT' on page 311 Icontinued from 'Broward' on page 27]

About the author: Sergeant Steven Santucci has servedas a
police officer for the Ridgewood, New Jersey Police Department
since 1990. He currently serves as the head of the Information
Technologies Division. Steve is a graduate of Northwestern
University's School of Police Staff and Command, holds a certifi-
cate in Advanced Networking from Rutgers University and is a
certified computer systems engineer.
Steve is responsible for the public safety computer informa-
tion systems for the Village of Ridgewood. The Ridgewood public
safety network serves not only law enforcement, but fire, EMS
and a multi-jurisdictional communications center as well. He
supports over 100 users and 70 plus workstations, servers, and
mobile computers, all utilizing CAD,RMS, Field reporting and
Computer Mapping.
trade. BSO'sDrug DiversionUnit hasbeen alerted to over 15,000
individuals in Broward County over the last ten years that are
associated with the abuse of pharmaceutical drug diversion.
Many of the individuals surface from one investigation to the
next.
Based on this constant activity, law enforcement officials
believe that in excess of two million dose units of pharmaceuti-
cal controlled substances a year are hitting the streets of
Broward County for non-medical or illicit purposes. That
amounts to a street price of over ten million dollars a year. It is
this pattern of abuse that urges law enforcement and regulatory
to the long neglected area of prescription drug abuse. .
agencies to alert our legislators that attention must now be paid

For more information about the Broward County Sheriff's Office

Drug Diversion Unit e-mail Det. Lisa McElhaney at
lisa_mcelhaney@sheriff.org.

InternationalMissionInformationSource
Iraq Mission

O n behalf of the United States Department of States,

Bureau of International Narcotics and Law
· We are seeking specialized
generalist position.
skills - this is not a

Enforcement Affairs, DynCorp Aerospace Operations (UK)

Ltd. (DAOL),a CSC Company, is seeking individuals with
appropriate experience and expertise to participate in an
international effort to re-establish police, justice and prison
functions in post-conflict Iraq. Interested applicants must
be active duty, retired or recently separated sworn police
officers, correctional officers or experienced judicial experts.
US citizenship is required. If interested, please call toll-free
(866) 258-8770or email cODs.recruitim!@dvncoro.com or
visit www.]!olicemission.com.
Additional details will be discussed.
How to Apply
If you meet all the requirements for this position and
are interested in this challenging assignment, please send
us a resume using our ResumeMaker. Include specialtrain-
ing, assignments and certifications in your resume.
To apply, fax your resume to:
Iraq Recruiting

·· us Citizen
Qualifications

Applicant must have a total of ten (10) years of sworn

(817) 737.1608

Or mail your resume to:

civilian domestic law enforcement experience. International Police Program Recruiting - 7th Floor
· Actively serving sworn law enforcement officer, or 6500 West Freeway, Suite 600
en
... recently separated sworn law enforcement official Fort Worth, Texas 76116
o
to
III
(within 5 years but 3 years is preferred).
C · Ability to communicate in English. Once your resume is received, we will contact you with
:c further details.
\f-
· Valid US driver's license and ability to operate a
LU

~
U
o
V)
V)
·· standard transmissionvehicle.
Unblemishedbackground.
Excellenthealth.
For mission recruiting and status, call our recruiting
line: 1 (866) 258.8770.
«LI.I · Valid U.S. passport will be required.
:I:
I-