Experts you hire to test your defenses and prepare you for an attack, through assessments, penetration tests, response plans and tabletop exercises.
Consultants carry out readiness assessments, penetration tests, red team exercises, and tabletop exercises, and they help develop response plans and playbooks.
Outside testing shows whether inmate technology controls really work. Testers can try to do what an inmate might, such as breaking out of a kiosk or reaching another device.
- Tests whether inmate devices can reach staff systems or each other.
- Runs tabletop drills for system and door failures.
- Gives an outside view to support budget requests.
When a county was hit, the jail felt it
In January 2022, ransomware aimed at Bernalillo County, New Mexico, took down most data systems at its Metropolitan Detention Center, cut camera access and briefly disabled automatic doors. Inmates were confined to cells and visits were suspended.
Source: Malwarebytes
- Scoped penetration tests: can be aimed at kiosks, tablets and inmate networks, to prove segmentation is holding.
- Ransomware and incident readiness assessments.
- Penetration and vulnerability testing.
- Tabletop exercises with facility leadership.
| Control | Priority | How this helps |
|---|---|---|
| IR-8Incident Response Plan | P2* | Helps develop your response plan. |
| RA-5Vulnerability Monitoring and Scanning | P1 | Vulnerability assessments support scanning. |
| CA-7Continuous Monitoring | P1 | Assessment results feed ongoing monitoring. |
| PS-7External Personnel Security | P2* | Outside staff may fall under external personnel security. |
The ordering guide lists these services. An assessment doesn’t replace the required state CJIS audit.
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table