(a) Facilities.

1. (1) Arkansas Crime Information Center (ACIC) access devices shall be placed in areas with adequate physical security that will:

   1. (A) Prevent access by the public or other nonofficial personnel;
   2. (B) Prevent access by unauthorized agency personnel; and
   3. (C) Allow access to a minimum number of authorized agency personnel.
2. (2) Internal procedures shall be implemented that will protect not only access devices, but also technical documents and any records associated with entries in the state and national systems.
3. (3) Identification shall be required before admitting equipment maintenance personnel or other officials from outside the agency.

(b) Security checks.

1. (1) ACIC will conduct periodic on-site security inspections in all interface agencies to ensure compliance with the ACIC System Service Agreement, as well as ACIC, National Crime Information Center (NCIC), and National Law Enforcement Telecommunications System (NLETS) security policies.
2. (2) Agencies will permit the inspector, after proper identification, to conduct appropriate review of all hardware, software, communications interfaces, and operating procedures relating to the ACIC, NCIC, and NLETS systems.
3. (3) Results of inspections will be reported to departmental officials.
4. (4) Security violations that remain uncorrected will be reported to the Supervisory Board for the Arkansas Crime Information Center.