Public Safety
Three in the morning is exactly when it has to work.
CJIS-aware network design, evidence and recording storage with a defensible chain, records retention that satisfies public records law, and systems built on the assumption that downtime is not an inconvenience but an operational failure.
If criminal justice information touches your email, the FBI CJIS Security Policy sits on top of everything else on this page.
CJIS aware
Where CJI touches your systems.
ORC 1347.12
Political subdivision breach duty.
Evidence chain
Defensible storage and access logs.
Uptime
Because the call does not wait.
Three Obligations At Once
Criminal justice data, public records law and a breach statute, all on the same systems.
Where criminal justice information is accessed, stored or transmitted, the FBI CJIS Security Policy applies — advanced authentication, access control, audit logging, physical protection and personnel screening. It is detailed, and it is audited.
Simultaneously you are a political subdivision under ORC § 1347.12, with a forty-five day breach notification duty and no access to the Chapter 1354 safe harbour, and you are subject to public records obligations that shape what must be retained and produced.
Underneath all of it sits an operational requirement most organisations never face: the systems have to work at three in the morning, in weather, during the worst night of somebody’s life. Resilience here is not a service-level target on a contract.
Build it to hold at three in the morning. Document it for the audit at ten.
Audit findings are usually documentation
In our experience the controls are more often present than absent. What is missing is the written record proving they were present, which is a far cheaper problem to fix before the audit than after it.
What We Handle
For departments, dispatch and the courts
CJIS-aware network design
Segmentation, advanced authentication and audit logging wherever criminal justice information lives, with the documentation the policy expects.
Evidence and recording storage
Body-worn, in-car, interview and dispatch recordings stored with access logging and a chain that holds up when it is questioned.
Records retention and public records
Retention schedules applied automatically, and the ability to produce what is requested without disturbing what is exempt.
Resilience and continuity
Redundancy, backup power awareness and tested restores, because a failure here is an operational event rather than an inconvenience.
Mobile and in-vehicle systems
Laptops and tablets in vehicles, secured, connected and manageable without pulling a unit out of service to update it.
Breach readiness under 1347.12
The forty-five day duty applies to you like any political subdivision, and the safe harbour does not.
Public-entity obligations are covered in full on the secure email and Ohio compliance page.
It has to work when nothing else is working. Build for that.
Questions
Questions from departments and courts
Do you handle CJIS requirements directly?
We design and document to the CJIS Security Policy and work with your agency’s CJIS coordinator and the state control agency. We are an IT provider, not the certifying authority, and we are clear about that distinction.
Does the Ohio safe harbour apply to a police department?
No. Chapter 1354 covers businesses. As an agency of a political subdivision your breach duty is ORC § 1347.12, with no affirmative defence available.
How should body-camera footage be stored?
With retention matched to your schedule and state law, access logging on every view and export, and storage sized honestly for the volume — which is almost always larger than the original estimate.
Can work be done without taking systems offline?
Mostly. Anything that cannot be is scheduled deliberately, with a fallback agreed in advance. Dispatch and records do not get experimented on.
Backup & Security Compliance
SOC 2 Type II platforms
The backup and security platforms we deploy are independently SOC 2 Type II audited.
HIPAA controls, BAAs signed
Configured to the HIPAA Security Rule, and we sign Business Associate Agreements.
PCI DSS aligned
Cardholder environments segmented, encrypted and logged to PCI DSS requirements.
Your One Stop I.T. Shop
Whenever You Are Ready
Let us look at what your department is running on.
Where CJI lives, how evidence is retained, what happens when a system fails at two in the morning, and whether the documentation would survive an audit.
Ready at three in the morning. Documented for the audit.
Chas Enterprise Group · Grafton, Ohio 44044 · (440) 364-3596 · charley.george@chasenterprisegroup.com