Through a blog post on the Amazon website just today, Amazon Web Services (AWS) announced that it signed a CJIS Security Addendum for Minnesota - thus enabling its "GovCloud services available to law enforcement customers." The required background checks have apparently already begun.
"By signing the addendum, this enables local law enforcement agencies in Minnesota to run CJIS workloads on the AWS Cloud, including biometric, identity history, person, organization, property, and case/incident history data, with confidence that they are compliant with CJIS standards." The original blog entry explains the security precautions being taken and a small glimpse into what's involved in the background checks, like fingerprints, training, etc.
This isn't a first for AWS though. It adds that it signed a similar addendum for the California Department of Justice just this past December (they link to that announcement) - so Minnesota isn't alone. This time around however AWS worked with iCrimefighter for "a mobile forensics software and evidence gathering system." All this includes an app for law enforcement officers to be that much more mobile.
The blog quotes Steven London, iCrimefighter CEO: "Security is a top concern for iCrimefighter, and the AWS Addendum with the State of Minnesota substantiates our commitment to securely store and manage critical digital evidence in the AWS GovCloud (US) for our law enforcement partners in MN—and across the country. By working with AWS, we are able to simplify access to digital evidence by uploading that evidence to a secure cloud."
Unfamiliar with this addendum? On the FBI CJIS Security Policy: "Private Contractor User Agreements and CJIS Security Addendum - The CJIS Security Addendum is a uniform addendum to an agreement between the government agency and a private contractor, approved by the Attorney General of the United States, which specifically authorizes access to CHRI, limits the use of the information to the purposes for which it is provided, ensures the security and confidentiality of the information is consistent with existing regulations and the CJIS Security Policy, provides for sanctions, and contains such other provisions as the Attorney General may require." It adds that agreeing parties participate in the training and background checks mentioned before.
So, I guess congratulations can be said for Minnesota - looks like with spring's clearer skies there's more use for clouds than snow (sorry, I couldn't resist).
