Perf-Based Stds, Adult Corr. Inst. 5th ed March 2021

Performance Standard 1F: Information Systems and Research

1F. - PERFORMANCE STANDARD: INFORMATION SYSTEMS AND RESEARCH Effective systems of data and information storage and retrieval are vital for the maintenance of operational effectiveness and research capability. Information Systems

5-ACI-1F-01 (Ref. 4-4100)

The institution contributes to, has access to, and uses an organized system of information storage, retrieval, and review. The information system is part of an overall research and decision-making capacity relating to both inmate and operational needs and its effectiveness as it relates to overall institutional management is evaluated in writing at least annually. Comment : Correctional information systems facilitate decision making, research, and timely responses to offender needs and outside inquiries. In large correctional systems, information systems often are the responsibility of the parent agency. If the parent agency does not provide this function, the institution should train and assign specific personnel to this function.

Protocols :Written policy and procedure. Information and records formats and forms.

Process Indicators : Facility records. Staff records. Volunteer records. Offender re- cords. Observation. Interviews. Written annual evaluation.

5-ACI-1F-02

(Effective NLT October 1, 2020) Written data security policy, procedure, and practice govern the collection, storage, retrieval, access, use, and transmission of sensitive or confidential data contained in paper, physical, or media format.

NEWAug. 2018

Comment : None.

Protocols : Written policy and procedure.

Process Indicators : Observation.

5-ACI-1F-03

(Effective NLT October 1, 2020) There is a written information technology incident response and management plan to be used in the event that the in- stitution experiences an information technology security breach. The plan is approved by the agency Chief Information Officer or equivalent, reviewed an- nually and updated as necessary, and is communicated to all staff. The plan includes the following: • Incident Reporting Procedures • Staff Roles & Responsibilities for Incident Response and Management • Incident Investigation Procedures

NEWAug. 2018

Adult Correctional Institutions, Fifth Edition 41