The Louisiana State Police (LSP) provides a vast array of services that either directly or indirectly support the exchange of criminal justice information (CJI) to other Criminal Justice Agencies (CJA) and Non-Criminal Justice Agencies (NCJA). As the CJIS Systems Agency (CSA) of Louisiana, LSP has a requirement to manage and audit all CJA's and NCJA's with direct and indirect access to CJI.
In order to fulfil this requirement, LSP and the Office of Technology Services (OTS) developed a Centralized Vendor Vetting Program (CVVP) to ensure CJIS compliance with statutorily mandated requirements and established operational, technological, and security policies. The CVVP addresses the requirement that national and state fingerprint-based background checks be conducted for vendor personnel who are involved with the administration of criminal justice services and have unescorted physical or virtual access to CJI systems within the state of Louisiana. Entities that would benefit from this program include: vendors that provide services in conjunction with the exchange of criminal justice information, vendor personnel involved with the maintenance of criminal justice-related computer systems, live scan, and civil scan vendors.
The CVVP reduces the need to perform duplicate fingerprint-based background checks for the same vendor personnel; therefore, making it more efficient for vendors who contract with Louisiana-based CJAs and NCJAs. These fingerprint-based background checks are conducted to meet the Federal Bureau of Investigations (FBI) CJIS Security Policy standards.
LSP personnel will work with eligible vendors to streamline the background process per the requirements of the CJIS Security Policy. Please note that the CJIS CVVP does not certify that the vendor's technical services, products, or solutions are compliant with the CJIS Security Policy, nor does it grant any type of license or certification to the vendor for said services, products, or solutions.
CJIS must be protected until the information is either released to the public through an authorized disclosure, such as in a crime report, or purged or destroyed in accordance with applicable Louisiana and federal record retention rules. The CJIS Security Policy outlines a minimum set of security requirements that create security controls for managing and maintaining CJI. When implemented, managed, and followed correctly, the CVVP will assist in the protection of this valuable information until released in accordance with the current CJIS Security Policy.
If you need to submit CVVP forms or if you have any questions about the LSP CJIS CVVP, please email [email protected].
Visit the BCII Library for all CVVP Vendor Lists, Forms, Sample Policies, and other related documents.