Workplace Computer Theft Research Staff Assignment A growing problem within law enforcement agencies is the retrieving and distributing of unauthorized information from agency computers. Some agencies have begun to discipline and occasionally terminate employees for "on duty computer theft ... theft of computer time or use that results in on-line charges to an agency". Accessing systems such as Motor Vehicle Records, National Criminal Justice Information Center Files, court systems, or local law enforcement data bases for personal reasons by an employee is computer theft. Persons from a chief of pol ice to clerical staff have been convicted of misuse. Researching past incidents showed that a citizen who gained access by posing as a police officer was convicted of computer theft and sentenced to prison. A police chief was fined and dismissed from office. An IRS employee was convicted of computer theft and sent to prison for three years. A detective lost his job after adm itting to i Ilega Ily using law enforcement computers. A police sergeant went to jail and was sentenced to probation after being prosecuted (the plea included job dismissal). Computer theft has become a serious crime being met with serious consequences Property personnel often have to obtain criminal records or warrant status prior to release of property that may include weapons. The best way to avoid problems is through proper training of all personnel on what computer theft is. Training employees on laws pertaining to appropriate computer use is an essential step in avoiding future problems. It is recommended that all employees (sworn, civilian, professional, technical, management and non-management) sign a statement that clearly indicates they are aware of restrictions on the access and distribution of information. Keep the signed form in the employee's personnel file. If misuse does occur, the employee cannot say they were not trained. System Administrators should conduct regular audits of system use. Local systems have the ability of printing all data that was accessed by the terminal for audit purposes. A good audit system would include passwords so specific users can be identified. Most state systems will provide a record of what passwords were used to access the state system and related information for an agency to self-audit. National systems (as well as most shared information systems) have internal flags that notify the system manager if the access profile is not within normal boundaries. The key to avoiding problems is through education and proper monitoring of computer systems. Federal statues used to prosecute individuals for unauthorized access to or misuse of National Crime Information Center are:
Copyright © 1999 International Association for Property and Evidence, Inc. Reprinted from the Evidence Log, Volume 1995, Number 2, Page 13 |
