Goodwill of Colorado

Includes:

• Policy 45-74 Acceptable Use Policy for Colorado Bureau of Investigations (CBI) - The purpose of this policy is to outline the acceptable use of computer equipment at Goodwill of Colorado. These rules are in place to protect the employee and Goodwill of Colorado. Inappropriate use exposes Goodwill of Colorado to risk including virus attacks, compromises of the network systems and services, and legal issues.
  • Attachment 1 - How and Where CHRI is Stored for CBI
  • Attachment 2 - Criminal Justice Information Services (CJIS) Security Policy 
• Policy 45-74.2 Disposal of Media Policy and Procedures for CBI - The purpose of this policy is to outline the proper disposal of media (physical or electronic) for Goodwill of Colorado. These rules are in place to protect sensitive and classified information, employees, and Goodwill of Colorado. Inappropriate disposal of Goodwill of Colorado, CBI, and FBI Criminal Justice Information (CJI) and media may put employees, Goodwill of Colorado, the CBI, and the FBI at risk.
• Policy 45-74.3 Physical Protection Policy for CBI - The purpose of this policy is to provide guidance for agency personnel, support personnel, and private contractors/vendors for the physical, logical, and electronic protection of Criminal Justice Information (CJI). All physical, logical, and electronic access must be properly documented, authorized, and controlled on devices that store, process, or transmit unencrypted CJI. This Physical Protection Policy focuses on the appropriate access control methods needed to protect the full lifecycle of CJI from insider and outsider threats.
• Policy 45-74.5 Disciplinary Policy for CBI - The purpose of this policy is to outline the disciplinary actions that apply to all Goodwill of Colorado employees, contractors, consultants, temporary staff, and other workers at Goodwill of Colorado, including all personnel affiliated with NCIC and third parties. These rules are in place to protect Goodwill of Colorado from inappropriate misuse of Criminal History Record Information (CHRI). Inappropriate use of CHRI exposes Goodwill of Colorado to risk including virus attacks, compromises of the network systems and services, and legal issues.
• Policy 45-74.6 Audit Policy for CBI - The purpose of this policy is to outline the auditing responsibilities and accountability for Goodwill of Colorado. Goodwill of Colorado will carefully assess the inventory of components that compose Goodwill of Colorado’s information systems to determine which security controls are applicable to the various components.
• Policy 45-74.7 Criminal History Record Information (CHRI) Appropriate Use Policy for CBI - The purpose of requesting a fingerprint background check for new hires, employees, and volunteers is to protect Goodwill of Colorado from liability caused by "negligent hiring" situations, and to ensure that the best possible candidates are hired Goodwill of Colorado will request CHRI via CBI and FBI background report. This information shall be used solely for the purpose requested and cannot be disseminated outside the receiving departments, related agencies, or other authorized entities. Public Law 92-544 and Title 28, C.F.R., 20.33 and 50.12(b).