1. “Partnerships with Purpose – Visions for Public Safety’s Future”
NCJA National Forum 2003
“Partnerships with Purpose – Visions for Public Safety’s Future”
St. Pete’s Beach, FL
July 21, 2003
“Regional Information Sharing – What’s Working? Is It Helping?”
Angelo J. Fiumara, Jr., Deputy Director
Regional Information Sharing Systems
Office of Information Technology

2. Regional Information Sharing Systems (RISS) Mission
To enhance the ability of local, state, tribal, and federal law enforcement and criminal justice agencies to identify, target, and remove criminal conspirators, and to support investigation and prosecution efforts which span multi-jurisdictional boundaries involving narcotics trafficking, organized crime, criminal gangs, terrorism, and violent crime.

3. Regional Information Sharing Systems (RISS) 1973 – 1981
ROCIC Regional Organized Crime Information Center
RMIN Rocky Mountain Information Network
NESPIN New England State Police Information Network
MOCIC Mid-States Organized Crime Information Center
WSIN Western States Information Network
MAGLOCLEN Middle Atlantic-Great Lakes Organized Crime
Law Enforcement Network

4. RISS INTELLIGENCE CENTERS
NESPIN
Franklin, MA
MOCIC
Springfield, MO
MAGLOCLEN
Newtown, PA
WSIN
Sacramento, CA
RMIN
Phoenix, AZ
ROCIC
Nashville, TN

5. Regional Information Sharing Systems (RISS) POLICY SOURCES
U.S. DOJ / BJA funding oversight and program management
BJA Funding and Administration Guidelines of the Regional Information Sharing Systems Program
28 CFR Part 23, Criminal Intelligence Systems Operating Policies
Policy Board, Executive Board, or Executive Committee at each Center

6. Regional Information Sharing Systems (RISS) POLICY SOURCES
RISS Directors Association
(RISS National Advisory Board)
RISS Intelligence Center Directors
Deputy Directors
Center Policy Board chairs
RISS IT Policy Group
Director, RISS Office of Information Technology

7. AGENCY REPRESENTATION March 31, 2003
As of March 2003, there were 6,431 municipal, county, state, tribal, and federal law enforcement and criminal justice agencies as members.
Federal 843
State 388
Municipal
County
Prosecutor 310
Corrections
Other 191
More than 58,000 officers and agency professional users

8. Elements of the Regional Information Sharing Systems (RISS) Program
Supports law enforcement efforts to combat multi-jurisdictional criminal activity, such as drug trafficking, traditional and non-traditional organized crime, gangs, terrorism, and violent crime
Provides a structured system to facilitate communication and cooperation among federal, state, local, and tribal law enforcement agencies
Regional differences – Each center chooses multi-jurisdictional crimes to target and the range of services to offer in support of member agencies, i.e., analytical services and products
Access to timely information on criminal suspects and activities

9. Elements of the Regional Information Sharing Systems (RISS) Program
Secure intranet (riss.net) for electronic networking of law enforcement and criminal justice agencies throughout the U.S. and U.S. territories, as well as the U.K., Canada, and Australia
Electronic linking of the six RISS Intelligence Center criminal intelligence databases and the RISS National Gang Database
RISS Investigative Leads Bulletin Board (RISSLeads) for member agencies to post information and collaborate on investigations and crime problems
Electronic linking to other systems, such as the Criminal Information Sharing Alliance network (CISAnet), High Intensity Drug Trafficking Area (HIDTA) Intelligence Centers, El Paso Intelligence Center (EPIC) Clandestine Laboratory Seizure System, and state systems

10. RISS Intelligence Center Services
Required service components
Information sharing
Telecommunications
Analytical
Optional service components
Investigative support
Specialized equipment
Training
Technical assistance

11. Analytical Services Provided
Case / Investigative analysis
Link analysis
Telephone toll analysis
Financial analysis
Association analysis
Event / Activity flow analysis
Commodity flow analysis
Timeline analysis
Pattern / Behaviors analysis
Organizational hierarchy charts
Trial exhibits

12. Information Sharing / Participation Initiatives

13. Information Sharing / Participation Initiatives
Sensitive but unclassified (SBU) information sharing network
RISS / FBI Law Enforcement Online (LEO)
Executive Office For the United States Attorneys (EOUSA)
93 United States Attorneys
94 United States Attorneys Offices (USAOs)
250 locations
1000 initial riss.net access officers
U.S. DOJ; Criminal Division
50 riss.net access officers
Washington, D.C.; Rapid City, SD; Bogotá, Columbia

14. RISS (riss.net)
FBI LEO (leo.gov)
&
Interconnectivity

15. RISS / LEO Interface Initiative Accomplishments To Date……….
Simultaneous “Single sign-on” to both the riss.net system and leo.gov system
users holding valid accounts for both the riss.net system and leo.gov system simultaneously authenticate to both systems
Users no longer required to “log off” one system in order to “log on” to the other system
Transmission of secure, encrypted messages
transmitted between users having a riss.net address and users having a leo.gov address is encrypted
Access to the unique variety of resources and services available from RISS and the unique variety of resources and services available from LEO to a larger, more diversified user community, thereby facilitating and enhancing information sharing efforts

16. Authentication and Access to both riss.net and leo.gov Systems
Open a browser session and navigate to a RISS resource

19. Authentication and Access to both riss.net and leo.gov Systems
Open a browser session and navigate to a LEO resource

20. Authentication and Access to both riss.net and leo.gov Systems

21. Authentication and Access to both riss.net and leo.gov Systems
Navigate through RISS resources and LEO resources without having to “log off” one system and “log on” to the other

22. Secure E-Mail @magloclen.riss.net
@mocic.riss.net
@nespin.riss.net
@rocic.riss.net
@rmin.riss.net
@wsin.riss.net
@risstech.riss.net
@atix.riss.net
@adg.riss.net
@epicmail.riss.net
@hidta.net
@cbidoj.org
@leiu.org
@leo.gov
EXPLANATION
Secure, encrypted can be transmitted between any of the listed domains. All the domains, with the exception are resident on riss.net. The frame relay connection between riss.net and leo.gov provides the pathway for traffic between any of the riss.net domains and the leo.gov domain.

24. Anti-Terrorism Information Exchange
(RISS ATIX)
RISS ATIX Community Participants
State Government Executive
County Government Executive
Local Government Executive
Tribal Government Executive
Federal Government Executives and Agency Officials
State Emergency Management
County Emergency Management
Local Emergency Management
Tribal Emergency Management .

25. Anti-Terrorism Information Exchange
(RISS ATIX)
RISS ATIX Community Participants… (continued)
State Public Health Executive
County Public Health Executive
Local Public Health Executive
Tribal Public Health Executive
Non-RISS Member Law Enforcement or Criminal Justice
Fire Department
Emergency Medical Provider
Chemical Industry
Disaster Relief
Education (Primary, Secondary, and University)
Postal and Shipping .

26. Anti-Terrorism Information Exchange
(RISS ATIX)
RISS ATIX Community Participants… (continued)
Public Utility - Water
Public Utility - Power
Public Utility - Other
Private Utility – Water
Private Utility – Power
Private Utility – Other
Special Skill Rescue Unit
Telecommunication
Transportation
Other .

27. ATIX Resources Secure e-mail Web pages (RISS ATIX Web Page)
Alerts and Homeland Security information
Web pages (RISS ATIX Web Page)
RISS-provided
Node system-provided
General information
Community-specific information
Intelligence and collaboration bulletin board (ATIX Bulletin Board)
User-identified “conferences”; posting and responding
Community-wide
Community-specific
Private, by invitation
On-line keyboard conferencing
Secure direct from board
Off-system notification and confirmation

28. Multi-States
Anti-Terrorism
Information Exchange
MATRIX

29. Multi-State Anti-Terrorism Information Exchange (MATRIX)
Coalition of states sharing CCH, DMV (vehicle registration and/or drivers license), and other types of criminal justice “public” information, to enable factual analysis research
California
Florida
Georgia
Kentucky
Louisiana
Michigan
New York
Ohio
Oregon
Pennsylvania
South Carolina
Utah

30. Information Sharing / Participation Initiatives….continued
RISS / NLETS Interconnection Pilot Project
Physical interconnection between RISS and the National Law Enforcement Telecommunications System (NLETS) via frame relay link
Authorized RISS users would access the RISS Secure Intranet (riss.net) from their state agency connection to NLETS
Access to the RISS Secure Intranet (riss.net) will still require authentication using RISS authentication and VPN software
All telecommunications traffic would travel within the confines of the frame relay networks of the RISS Secure Intranet (riss.net) and NLETS
Pilot states
Arizona, Iowa, Maine, Vermont

31. Information Sharing / Participation Initiatives….continued
JITF-CT RISS Information Exchange System (JRIES)
US DOD / DIA
OSIS / riss.net interconnection
California Anti-Terrorism Information Center (CATIC)
NYPD Counter-Terrorism Division (NYPD CTD)
Open Source
National Virtual Pointer System (NVPS) pilot project
NDPIX
HIDTA
NLETS
Conceptual discussion stage

32. Information Sharing / Participation Initiatives….continued
Colorado DPS; Office of Preparedness, Security and Fire Safety
RISS ATIX
Association of American Railroads
AAR Watch Center
U.S. DOT and the transportation industry
Transportation Information Operations Center (TIOC)
National Infrastructure Protection Center (NIPC)
Situation awareness information
U.S. and Canadian Railroads
“The Majors”
Regionals
Locals .

33. Information Sharing / Participation Initiatives….continued
U.S. Department of Homeland Security (DHS)
Pilot Project
Information Analysis and Infrastructure Protection Section (DHS IAIP)
Arizona, California, Colorado, Florida, Massachusetts, Nebraska, Pennsylvania
Law enforcement agencies from each RISS Center region

34. Information Sharing / Participation Initiatives….continued
SBU Federated System
DHS
TSA
Secret Service
INS and Border Patrol
DOD
DOJ
State and Local

35. What is the RISS Secure Intranet?
A secure law enforcement communication system among the RISS Intelligence Centers, node agency systems, and authorized individual users collectively known as
riss.net

36. RISS Intelligence Center Regions
NESPIN
Franklin, MA
MOCIC
Springfield, MO
MAGLOCLEN
Newtown, PA
WSIN
Sacramento, CA
RMIN
Phoenix, AZ
ROCIC
Nashville, TN

37. MOCIC NESPIN WSIN MAGLOCLEN RMIN ROCIC
Springfield, MO
NESPIN
Franklin, MA
WSIN
Sacramento, CA
MAGLOCLEN
Newtown, PA
Slide 2 – RISS Geographical Regions
This slide represents the boundaries of the six RISS regions and the location of the center headquarters.
RMIN
Phoenix, AZ
ROCIC
Nashville, TN

38. Types of resources available via riss.net
RISS Intelligence Center web pages containing links to general and RISS specific law enforcement and public safety related bulletins and information
Criminal Intelligence Database Pointer System (RISSIntel / RISSNET II)
National Gang Database (RISSGang)
Investigative Leads Bulletin Board (RISSLeads)
Master (federated) index and search capability against RISS resources and selected public and private Internet resources (RISSSearch)
Secure
RISSTraining
TechPage

39. riss.net Nodes . Connected Agencies Connections in progress…
CA DOJ (CBI) / LEIU
Colorado DPS
EPIC CLSS
Florida Department of
Law Enforcement
Missouri State HP
Oregon DPS
South Dakota DCI
CISAnet (formerly SWBSADIS)
AZ, CA, NM, TX
Utah ULEIN
Washington State Patrol
Wyoming DCI
Connections in progress…
NW3C
Iowa DPS
NLETS
Connected HIDTA Agencies
Chicago HIDTA
Midwest (Kansas City) HIDTA
Milwaukee HIDTA
Oregon HIDTA
South Texas (SWB) (San Antonio) HIDTA
Washington/Baltimore HIDTA
Gulf Coast (Metairie, LA) HIDTA
Los Angeles HIDTA
South FL (Miami) HIDTA
NY/NJ HIDTA
Applications in process…
FinCEN
ATIX States
MATRIX states .

41. RISS Secure Intranet riss.net
Secure network utilizing WEB technology
Remote user dial-in
Internet access secured via VPN
Encapsulated message payload encrypted using triple DES
User authentication & authorization at firewall
Fine-grained access control; per session access privileges
Dual-tiered firewall design protects all data resources
Client to second-tier firewall VPN
LAN to LAN or server to server VPN
Detailed logging
FIPS compliant
Disaster recovery: network and data
Continuous intrusion detection and firewall log inspection
virus and trojan detection at server level
Recurring security testing by independent authority

42. RISS Secure Intranet riss.net
Fully encrypted virtual private network (VPN) across the Internet to the riss.net gateway firewall
Triple DES
Three separate 56 bit keys each session
AES (2nd Quarter 2003)
Encrypted key storage on multiple media types
riss.net intranet on frame relay circuits
Permanent Virtual Circuits (PVC) on the frame relay
Fully encrypted VPN on the PVCs
ISDN for frame circuit backup
Node LAN connections are on frame relay PVCs with fully encrypted VPNs
V-ONE SmartWall (Sun Solaris, Gauntlet, SmartGate)
RISSCop (RISS ISP)

43. RISS Secure Intranet riss.net
Initial client access
Client software (SmartPass)
Installs on Windows 98, 2000, NT, XP
On-line registration
Web access to Internet firewall via nonstandard port
Account activated by RISS security manager
Account assigned to specific group via manual process
User authenticated and allowed access
All traffic converted to a single nonstandard port
Permissions stored on SmartGate server
Client Key stored on token

45. Thank You! For further information, please contact:
Angelo J. Fiumara, Jr., Deputy Director
Regional Information Sharing Systems Office of Information Technology
Telephone: (610)
Fax: (610)
Mr. James T. Rogers, Director
Regional Organized Crime Information Center (ROCIC)
545 Marriott Drive, Suite 850
Nashville, TN
Telephone: (800)