ALL TOUCH USERS:

***** IF YOU DO NOT USE FLEX TOUCH , YOU CAN IGNORE THIS MESSAGE **************

We will begin disabling the TOUCH application access permissions today at 1 PM.   Please see below for the message sent to department heads/chiefs/command staff.

This does not affect the FLEX Mobile application which runs on Windows (MDT's/PC's/laptops).

Respectfully,

Jeff Mullins

________________________________
From: Mullins, Jeffery C.
Sent: Wednesday, September 25, 2024 16:44
To: Robbie Brown <rbrown@ci.asheboro.nc.us>; Rodney Neal <rneal@ci.asheboro.nc.us>; dfloyd@ci.asheboro.nc.us <dfloyd@ci.asheboro.nc.us>; laynej@Guil-Randfire.com <laynej@Guil-Randfire.com>; Williamson, Recil J. <recilw@msn.com>; staleyvfdchief@gmail.com <staleyvfdchief@gmail.com>; Azelton, Aundrea M. <Aundrea.Azelton@randolphcountync.gov>; Nunn, Steven M. <Steven.Nunn@randolphcountync.gov>; Davis, Donovan L. <Donovan.Davis@randolphcountync.gov>; Byrd, Jared K. <Jared.Byrd@randolphcountync.gov>; Buxton, Justine M. <Justine.Buxton@randolphcountync.gov>; Martin, Sheri T. <Sheri.Martin@randolphcountync.gov>; Foster, Shannon L. <Shannon.Foster@randolphcountync.gov>
Cc: Williamson, R.J. <RJ.Williamson@randolphcountync.gov>; Saylor, Chris J. <Chris.Saylor@randolphcountync.gov>
Subject: FLEX Touch

Please forward this notice to the appropriate personnel.

Effective 10-1-2024, the FBI policy (Criminal Justice Information Services - CJIS - Security Policy 5.9.5) that governs how law enforcement agencies can access FBI-controlled information systems will change significantly.  One requirement of the policy impacts Touch users immediately and requires us to disable mobile Touch access for all users on 10-1-2024.

FLEX is considered a direct access information system when it comes to accessing CJIS systems and we must comply with the security policy of the FBI.  In section 5.13.2, it is stated that any limited-feature operating system (meaning iOS or Android) which directly accesses a criminal justice information system (which FLEX does) must have a Mobile Device Management (MDM) application.  The MDM requirement applies to any device regardless of ownership. Randolph County IT has purchased an MDM system and will be enrolling county-owned mobile devices in the coming weeks. After the mobile device(s) are enrolled in the MDM system, mobile Touch access will be restored.

If you access the CJIS security policy at https://urldefense.com/v3/__https://le.fbi.gov/cjis-division/cjis-security-policy-resource-center__;!!Cf0W_uKtjjI!uE51PbTK17GgZLilh9bKT9sq1OLwtU8flWP2bB31bm2CTdU9KEmQT846mQrcCnO0u9xx0bMAqq0cPxkKCM9yqIS4cjLOa7oZu33sIRhjbWWxmqww$ , you will notice an exception that states devices which indirectly access CJIS information are exempt.  However, it is written in such a way that FLEX itself wouldn’t have access to CJIS systems, which is not the case.  Therefore, we must consider all devices accessing FLEX as a direct access and that an MDM will have to be present.

Randolph County IT will be reaching out to affected county departments in the coming weeks to discuss the enrollment process for your mobile devices in our MDM system. We are still discussing the details for outside agency mobile devices that may have been granted access to mobile Touch. We will pass along information to those agencies as it becomes available.

Please contact Jeff Mullins (336-318-6321), Sheri Martin (336-318-6311), or me if there are any questions.

Respectfully,

R.J. Williamson, CGCIO
Director of Information Technology
Randolph County NC
725 McDowell Rd.
Asheboro, NC 27205
O: 336.318.6314

[cid:9a104f0b-c8fe-4764-88ee-e4ae7762b7e7]

This email and any files transmitted with it are confidential and intended for use only by the individual or entity named above. If you are not the intended recipient or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any disclosure, dissemination, distribution, copying of this communication, or unauthorized use is strictly prohibited. Please notify us immediately by reply email and then delete this message from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Randolph County Government. This email and any file attachments have been scanned for potential viruses; however, the recipient should check this email for the presence of viruses and/or malicious code. Randolph County accepts no liability for any damage transmitted via this email.