nationwide suspicious activity reporting (sar) initiative€¢ establishes a unified,...
TRANSCRIPT
![Page 1: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/1.jpg)
1
nsi.ncirc.gov
Nationwide Suspicious Activity Reporting (SAR) Initiative
![Page 2: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/2.jpg)
2
nsi.ncirc.gov
NSI Project Partners
![Page 3: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/3.jpg)
3
nsi.ncirc.gov
• The need for the NSI is shown by intelligence failures of September 11, as noted in The 9/11 Commission Report
• National Criminal Intelligence Sharing Plan• Intelligence Reform and Terrorism Prevention Act of 2004
• Establishment of the Information Sharing Environment• Information Sharing Environment Implementation Plan• President’s National Strategy for Information Sharing• White House memos creating two Program Management
Offices
A Brief History of the NSI
![Page 4: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/4.jpg)
4
nsi.ncirc.gov
What We Know
• Information gathered may be a precursor to criminal activity, including terrorism
• Sharing information can prevent or solve crimes and even save lives when linked together
• Technology plays a role• Human verification is critical to ensure the
protection of an individual’s privacy and civil liberties
![Page 5: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/5.jpg)
5
nsi.ncirc.gov
The Cornerstones of the NSI
• Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and share information about behavior-based suspicious activities that potentially have a nexus to terrorism (also referred to as the SAR process) while rigorously protecting the privacy, civil rights, and civil liberties of all Americans
• Integrates state, local, and tribal law enforcement agencies’ SAR processes into a nationwide effort
• Leverages existing processes and systems
![Page 6: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/6.jpg)
6
nsi.ncirc.gov
Why SAR and Why Now
• Dhiren Barot• In 2000, began plotting to attack a host of
financial industry targets in the United States • The World Bank, the New York Stock Exchange, Citigroup
buildings, and the Prudential Building
• Mumbai preoperational planning actions• Detailed street maps leading to target
locations• Detailed diagrams of hotel
floor plans/layouts• Stayed at target hotels• Indian national arrested. Had detailed
drawings of targeted Mumbai hotels,train terminal, and other sites
![Page 7: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/7.jpg)
7
nsi.ncirc.gov
NSI Privacy and Civil Liberties Protections
• NSI Privacy Protection Framework:• Privacy policy• ISE-SAR Functional Standard• Privacy training
• Executive Briefing• Analyst Training• Frontline Officer Training
• SAR Vetting Process
![Page 8: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/8.jpg)
8
nsi.ncirc.gov
• State and major urban area fusion centers serve as primary focal points within the state and local environment for the receipt, analysis, gathering, and sharing of threat-related information among federal, state, local, tribal, and territorial partners
• NSI is implementing standards, policies, and business processes in fusion centers• Quality, relevant information is sent to trained fusion
center analysts for vetting and analysis• Key for national coordination and analysis
Importance of Fusion Centers
![Page 9: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/9.jpg)
9
nsi.ncirc.gov
Training
• Current Offerings• Executive Briefing• Analytic/Investigative-Level Training• Line Officer Training• Community Awareness (In
collaboration with the “If You See Something, Say Something™” campaign)
• Under Development• Public Health and EMS• Public Safety / Criminal Justice /
Critical Infrastructure
![Page 10: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/10.jpg)
10
nsi.ncirc.gov
Enabling Technology
• To support the operational mission, NSI Federated Search Tool facilitates information sharing using the National Information Exchange Model (NIEM)• Searches across a federated
environment, using a standardized data format
• Decentralized, local agencies maintain control of information, privacy compliance with ISE Privacy Guidelines
• Map it/Link it Tool Added to NSI Federated Search Capabilities
![Page 11: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/11.jpg)
11
Moving Local Data to the Shared Space(Common Box Server)
Local Data Sources
Local Data Sources
Local Data Sources
Fusion Center A
Fusion Center B
Fusion Center C
RESULTSPAGE
![Page 12: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/12.jpg)
Server
ServerServer
Server
Server
Secure Portals
ISE Shared Spaces
Federated Search(www.ncirc.gov)
(HSIN Intel, LEO, RISS)
Conducting a Federated NSI Search
FederalServers
(eGuardianDHS)
![Page 13: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/13.jpg)
13
nsi.ncirc.gov
The Driving Force
• The most important component of the program is supporting the operational mission. The job of homeland security, safety, or justice cannot be relegated to a fragmented approach
• Standards‐based method for the gathering, processing, reporting, analyzing, and sharing of suspicious activity (also referred to as the SAR process)
• Critical integration of state, local, and tribal law enforcement agencies’ SAR processes into a nationwide effort
![Page 14: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/14.jpg)
14
nsi.ncirc.gov
Access toNSI Federated Search
SBU Networks
![Page 15: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/15.jpg)
15
nsi.ncirc.gov
The user logs into LEO and is brought to this page
Goes to menu on the left and “clicks” on “CJIS Portal”
![Page 16: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/16.jpg)
16
nsi.ncirc.gov
The user will then “click” on the RISSNET box
![Page 17: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/17.jpg)
17
nsi.ncirc.gov
This is the RISS logon page
![Page 18: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/18.jpg)
18
nsi.ncirc.gov
![Page 19: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/19.jpg)
19
nsi.ncirc.gov
![Page 20: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/20.jpg)
20
nsi.ncirc.gov
This is the NSIFederated Search page
![Page 21: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/21.jpg)
21
nsi.ncirc.gov
Using the NSI Federated Search
![Page 22: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/22.jpg)
22
nsi.ncirc.gov
NSI Federated Search Entrance Page
This is for test purposes
![Page 23: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/23.jpg)
23
nsi.ncirc.gov
NSI Search Screen
OR
![Page 24: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/24.jpg)
24
nsi.ncirc.gov
NSI Search Screen
![Page 25: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/25.jpg)
25
nsi.ncirc.gov
NSI Search Screen
![Page 26: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/26.jpg)
26
nsi.ncirc.gov
NSI Search Screen
![Page 27: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/27.jpg)
27
nsi.ncirc.gov
![Page 28: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/28.jpg)
28
nsi.ncirc.gov
![Page 29: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/29.jpg)
29
nsi.ncirc.gov
![Page 30: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/30.jpg)
30
nsi.ncirc.gov
SLATT Database Search
![Page 31: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/31.jpg)
31
nsi.ncirc.gov
![Page 32: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/32.jpg)
32
nsi.ncirc.gov
![Page 33: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/33.jpg)
33
nsi.ncirc.gov
![Page 34: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/34.jpg)
34
nsi.ncirc.gov
![Page 35: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/35.jpg)
35
nsi.ncirc.gov
NSI Next GenerationSearch Tool
![Page 36: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/36.jpg)
36
nsi.ncirc.gov
Map It/Link It
![Page 37: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/37.jpg)
37
nsi.ncirc.gov
![Page 38: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/38.jpg)
Map it
![Page 39: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/39.jpg)
39
nsi.ncirc.gov
Link it
![Page 40: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/40.jpg)
40
nsi.ncirc.gov
Single Line Search
![Page 41: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/41.jpg)
41
nsi.ncirc.gov
Texas AND Blue Ford
This functionality enables the Analyst to search multiple parameters using a single line search parameter and allows the use of the AND/OR capabilities.
It also includes the current detailedsearch page usingthe Advanced search option.
![Page 42: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/42.jpg)
42
nsi.ncirc.gov
![Page 43: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/43.jpg)
43
nsi.ncirc.gov
Subscription/NotificationSaved Query Abilities
![Page 44: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/44.jpg)
44
nsi.ncirc.gov
![Page 45: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/45.jpg)
45
nsi.ncirc.gov
![Page 46: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/46.jpg)
46
nsi.ncirc.gov
![Page 47: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/47.jpg)
47
nsi.ncirc.gov
![Page 48: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/48.jpg)
48
nsi.ncirc.gov
![Page 49: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/49.jpg)
49
nsi.ncirc.gov
![Page 50: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/50.jpg)
50
nsi.ncirc.gov
Success Stories—Private Sector (continued)
• VA Fusion Center received 3 reports of suspicious purchase of acetone and other products all on the same date, within a few hours of each other
• 3 different stores, total of 47 gallons • Subjects identified• Purchases tied to the manufacture of a drug – K2
![Page 51: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/51.jpg)
51
nsi.ncirc.gov
Success Stories—Traffic Stop
• Motor officer attended behavior‐based SAR roll call training
• Conducted a traffic stop• Driver appeared extremely nervous, unable to answer
routine questions• Officer discovered an expired international driver’s license• Officer contacted LAPD counterterrorism Major Crimes
Division • Officer completed a SAR• Further investigation revealed that the
vehicle was of interest
![Page 52: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/52.jpg)
52
nsi.ncirc.gov
SAR Success Story
• Fusion center partner agencies continue to integrate SAR into their procedures, populating the shared space
Success Stories SAR Line Officer Training
![Page 53: Nationwide Suspicious Activity Reporting (SAR) Initiative€¢ Establishes a unified, standards-based approach at all levels of government to gather, document, process, analyze, and](https://reader031.vdocument.in/reader031/viewer/2022022509/5ad2d62b7f8b9a86158d97b8/html5/thumbnails/53.jpg)
53
nsi.ncirc.gov
Questions?David P. LewisUSDOJ/BJA
NSI Chief Technology Officer(202) 616‐7829