Sworn to protect...implementing the security systems development life cycle into local law enforcement

Abstract

This paper sets out to provide an example for local law enforcement agencies to use in order to develop a basic information security program. In conjunction with outside sources used to parallel some key points between other organizations, such as universities and non-profit agencies, the Security Systems Development Life Cycle is a methodology used as the basis for this paper. The information from outside sources suggests that universities and non-profit businesses have suffered from massive attacks to the vital information of their students and personnel. To avoid falling victim to a predator waiting to induce the same systemic damage that has plagued these organizations, local law enforcement agencies must begin to develop plans to protect themselves in ways not traditionally thought of. Just as these two organizations house personal and organizational information that could be damaging if compromised, so to do local law enforcement agencies. A local law enforcement agency concerns vast information on, not only personnel but, defendants, victims, and witnesses as well. These defendants, victims, and witnesses have a right to have their information protected. A compromise to information could be severely damaging to the reputation and morale of any local law enforcement agency. With the thought of a possible deviant lurking and waiting for the opportune moment to strike, the local law enforcement agency should be approaching a sound, viable, and holistic program for their defensive strategy-the Security Systems Development Life Cycle offers the framework for a much needed information security program.