Reso 2025-3908 - Laserfiche WebLink

Home Browse Search

EXHIBIT 3 CentralSquare Access Management Policy In order to provide secure, federally compliant connections to agency systems CentralSquare Technologies ("CentralSquare") requires BeyondTrust or SecureLink as the only approved methodology of connection. BeyondTrust and Securelink provide the necessary remote access in order to service and maintain CentralSquare products while adhering to the Federal Bureau of Investigations Criminal Justice Information Services requirements. Both solutions utilize two -factor authentication Federal Information Processing Standard Publication ("FIPS") 140-2 validated cryptographic modules and AES encryption in 256 -bit strengths. BeyondTrust and Securelink are addressed in turn via this Access Management Policy; Customers may choose which remote privileged access management solution will be utilized by CentralSquare. BeyondTrust The BeyondTrust remote support solution may be utilized via escorted session or a jump Customer. As for an escorted'session, when an agency needs assistance from CentralSquare, the agency employee requesting assistance will receive verbal or email communication with a session key necessary to enable remote access. If a verbal key is provided, the user enters the session key after visiting https://securesupport.centralsquare.com. Jump Customers are a Windows service that can be stopped/started to facilitate a support session. Connections made via jump Customer can be active or passive. An active jump Customer is always available. A passive connection is enabled for a specific purpose and then disabled when not used. Regardless of the option selected, CentralSquare's support team will arrange a BeyondTrust session to establish the jump Customer. The jump Customer resides on the agency side on the installed device, where an agency administrator can manage. Instructions on how to enable/disable jump Customers can be provided upon request. A sample workflow of a passive jump Customer is provided below: Should an agency require support from CentralSquare, a call would be placed and/or a support ticket opened in the portal on the CentralSquare customer support website. Before accessing the agency's system and/or environment, the CentralSquare representative would send a notice of connection from the CentralSquare support portal instance. This notice can be sent to the individual at the agency that the CentralSquare representative is working with or other designated contacts as necessary. Upon receipt of the notice of connection, the agency personnel would enable the BeyondTrust jump Customer. The CentralSquare representative would then be admitted to the agency's system and/or environment to perform the necessary task. Upon completion of the task, the CentralSquare representative sends a notice of disconnection from the CentralSquare support portal instance Upon receipt of the notice of disconnection, the agency personnel would then disable the BeyondTrust jump Customer.. Securelink Similar to BeyondTrust's escorted session, Securelink may be utilized via "quick connect". To enable a quick connect session when an agency needs assistance from CentralSquare, the Agency employee requesting assistance will enter a key code in order to connect for screen sharing on a device. Similar to the jump Customer methodology, SecureLink may also be utilized via "gatekeeper". The sample workflow description for a jump Customer provided above is substantially similar to the workflow for gatekeeper. Summation BeyondTrust and Securelink allow customers the ability to monitor connectivity to the customer's network and maintain CJIS compliance while enabling CentralSquare to perform the necessary support functions. MORE INFORMATION AT CENTRALSQUARE.COM