application for 9-1-1 ... - illinois state police
TRANSCRIPT
ILLINOIS STATE POLICEOffice of the Statewide 9-1-1 Administrator
State of Illinois
Application for9-1-1 Consolidation Plan
ISP 7-302 (5/16)
INTRODUCTIONThe following document provides the application for submitting a 9-1-1 Consolidation Plan that will supply the Department of State Police (Department), the Illinois Commerce Commission (ICC), the Statewide 9-1-1 Advisory Board (Advisory Board) and the Statewide 9-1-1 Administrator (Administrator) with the necessary information about your proposal to consolidate your 9-1-1 system. All consolidations plans must comply with 83 Ill. Adm. Code Part 1324.
The Emergency Telephone System Act (“ETSA” or “Act”) (50 ILCS 750) Section 15.4a(b) states that each 9-1-1 authority or qualified governmental entity required to consolidate must file a consolidation plan by July 1, 2016.
There are three consolidation categories. Please find below the documents that need to be included when filing a consolidation plan for each category.
1) Consolidation of an unserved county with an existing 9-1-1 authority and the creation of a Joint ETSB2) Consolidation of either paper ETSB’s or multiple ETSB’s resulting in the creation of a Joint ETSB and
consolidation of individual PSAP’s3) Consolidation of PSAPs within an ETSB
Consolidation Plans defined under categories 1) and 2) above, must include the following documents when submitting a consolidation plan:
General Information Contact and 9-1-1 System information.
Verification Notarized statement of truth regarding information provided in the plan.
Letter of Intent Letter that is sent to the 9-1-1 System Provider with a copy of the plan.
Plan Narrative A summary of the changes of the proposed system’s operation.
Financial Information A summary of anticipated implementation costs and annual operating costs of the consolidated or 9-1-1 system that are directly associated with 9-1-1 as well as the anticipated revenues.
5-Year Strategic Plan A detailed plan for implementation and financial projections.
Communities Served A list of all communities that are served by the 9-1-1 System.
Participating Agencies A list of public safety agencies (Police, Fire, EMS, etc.) who are dispatched by the 9-1-1 System.
Adjacent Agencies A list of public safety agencies (Police, Fire, EMS, etc.) that are adjacent to the 9-1-1 System’s jurisdictional boundaries.
Attachments (if applicable):Ordinance Any local ordinances which dissolve an existing ETSB or creates a new ETSB.
Intergovernmental Any intergovernmental agreements or MOU’s creating a joint ETSB or any otherAgreement agreements pertinent to the 9-1-1 system.
Contracts Contract(s) with a 9-1-1 system provider or for NG-9-1-1 service.
Back-up PSAP Establishes back-up and overflow services between PSAPs.Agreement
Network Diagram Provided by the 9-1-1 system provider showing trunk routing and backup configuration.
Call Handling Call handling agreements shall describe the primary and secondary dispatch methodAgreements to be used by requesting parties within their respective jurisdictions.
Aid Outside Aid outside normal jurisdictional boundaries agreements shall provide that once anJurisdictional emergency unit is dispatched in response to a request through the system, such unit
2
Boundaries shall render its service to the requesting party without regard to whether the unit isAgreements operating outside its normal jurisdictional boundaries.
Carrier Listing A list of each carrier telephone company(s), exchange(s), prefix(es), and the various 9-1-1 System configurations that will be used in the proposed system.
Test Plan The 911 System’s overall plan detailing how and to what extent the network and data base will be tested.
These consolidation Plans must be filed electronically on the Department’s website at:
http://www.isp.state.il.us/Statewide911/statewide911.cfm where you will see the box below to submit your plan.
The Department and the ICC have 20 days to complete the technical review of your plan. An Administrative Law Judge (ALJ) will then have 20 days to hold a hearing and make a recommendation to the Advisory Board. From that point the Advisory Board has 20 days to hold a public hearing on the plan and provide a recommendation to the Administrator. Upon receipt of the Advisory Board’s recommendation, the Administrator will have 30 days to provide a written decision to the applicant.
Consolidations Plans defined under category 3) above do not need to be submitted electronically on the Department’s website.
The 9-1-1 Authority must provide written notification to the Administrator at [email protected] at least 10 business days prior to making the following changes pursuant to Section 1325.200(h). After review, the Administrator will provide a letter of acknowledgment. The following documents must be included in this notification:
General Information Contact and 9-1-1 System information.
Plan Narrative A detailed summary of the changes in the proposed system’s operation.
Attachments (if applicable):
Network Diagram Provided by the 9-1-1 system provider showing trunk routing and backup configuration
Call Handling Call handling agreements shall describe the primary and secondary dispatch methodAgreements to be used by requesting parties within their respective jurisdictions.
3
DATE:
Type of Change: Consolidation within an ETSB Joint ETSB Unserved Consolidation
Current System Name: Population Served Land Area in Sq Miles
System Name after Consolidation:
Consolidation/ Remain Open
Decommission/Close
Primary SecondaryPSAP EFFECTED:
911 System Contact: _____________________________________________________________________
Street Address: __________________________________________________________________________
City, State and Zip Code: ___________________________________________________________________
Office Telephone: _________________________________________________________________________
Cellular Telephone: _______________________________________________________________________
Email: __________________________________________________________________________________
911 GENERAL INFORMATION
Wireless Coverage for Consolidated System:
______% Phase II compliant
______% Phase I compliant
Please check if applicable:
_______ NG9-1-1 capable
_______ Receive 9-1-1 Text
_______ Receive 9-1-1 Video4
6
PLAN NARRATIVE
Please answer the questions below, and provide a detailed narrative to assist the Statewide 9-1-1 Advisory Board and the Statewide 9-1-1 Administrator with an understanding of the plan as it applies to this application. Please use additional sheets if necessary.
1. Do all of your PSAPs meet all of the requirements defined in 1325.415 and 1325.515
2. Type of Radio/Telecommunications systems compatible withparticipating and adjacent agencies.
3. Will all PSAPs remaining after consolidation direct dispatch all emergency calls pursuantto section 1324.200b)3)?
4. Have you included maps to show the territorycovered by the system?
5. Have you included a listing of all telephonecompanies?
6. Have you included a copy of theintergovernmental agreement, ordinance,resolution and/or contracts?
7. Have you included a list of participating andadjacent agencies?
8. Have you included financial information?
9. Public education.
10. Training.
11. Use of TTY’s and Training
STARCOMM21 STARCOMM21 ITTF channels onlyOther, explain below
Yes No
Plans submitted without this documentation will be rejected.
Yes No
Plans submitted without this documentation will be rejected.
Yes No
Yes No
Yes No
Plans submitted without this documentation will be rejected.
Yes No
Plans submitted without this documentation will be rejected.
Yes No
Plans submitted without this documentation will be rejected.
This is an unserved county that will require public education. (See attachment.) This is an existing 9-1-1 system(s) and does not require public education.
This is an unserved county that will require training. (See attachment.) This is an existing 9-1-1 system(s) and does not require internal training/similar/ongoing training for any GIS annexation or change of policy from agencies served.
This is a unserved county that will require training. (See attachment.) This is an existing 9-1-1 system(s) and does not require internal training.
7
12. Have you included call handling and aid outsidejurisdictional boundary agreements?
13. Have you included a new system diagram?
13a. Does the new system diagram include all PSAP(s) and backup PSAP location(s)?
14. Have or will all areas within the 9-1-1 system be addressed for the database?If no, please explain.
14a. Explain all aspects of the database, i.e., how often is it updated, where is it located, etc.
15. Who is the 9-1-1 system provider for your 911 system? Please explain whether the system will be legacy based,next generation based or a combination.
Yes No
Plans submitted without this documentation will be rejected.
Yes No
Plans submitted without this documentation will be rejected.
(Please include additional pages if needed.)
Yes No
Yes No
Plans submitted without this documentation will be rejected.
8
NARRATIVE STATEMENT:
(Provide a detailed summary of system operations for a consolidation plan. If incorporating an NG9-1-1 solution, please include the additional items listed below pursuant to 1325.205b)12).
1) Indicate the name of the certified 9-1-1 system provider being utilized.2) Explain the national standards, protocols and/or operating measures that will be followed.3) Explain what measures have been taken to create a robust, reliable and diverse/redundant network and whether
other 9-1-1 Authorities will be sharing the equipment.4) Explain how the existing 9-1-1 traditional legacy wireline, wireless and VoIP network, along with the databases,
will interface and/or be transitioned into the NG9-1-1 system.5) Explain how split exchanges will be handled.6) Explain how the databases will be maintained and how address errors will be corrected and updated on a
continuing basis.7) Explain who will be responsible for updating and maintaining the data, at a minimum on a daily basis Monday
through Friday.8) Explain what security measures will be placed on the IP 9-1-1 network and equipment to safeguard it from
malicious attacks or threats to the system operation and what level of confidentiality will be placed on thesystem in order to keep unauthorized individuals from accessing it.
Plan Narrative:
9
Plan Narrative:
10
FINANCIAL INFORMATION
Name of ETSB(s) that are being dissolved Total Reserves to be transferred to the Joint ETSB
______________________________________________ $__________________________________
______________________________________________ $__________________________________
Dispatch Staff and Positions
______Number of answering positions prior to the consolidation (total for all entities)
______Number of answering positions in the consolidated system
______Number of full time dispatchers/call takers prior to the consolidation (total for all entities)
______Number of full time dispatchers/call takers in the consolidated system
______Number of part time dispatchers/call takers prior to the consolidation (total for all entities)
______Number of part time dispatchers/call takers in the consolidated system
Total amount (and percentage) of salaries paid for by 9-1-1 authority prior to consolidation:
$_____________________ _____ %
Total amount (and percentage) of salaries to be paid for by 9-1-1 authority after consolidation:
$_____________________ _____ %
9-1-1 Network Cost (per year)
a) Total network cost for each entity prior to the consolidation $____________________________
b) Total network cost of consolidated system $____________________________
c) Net change in network costs: $____________________________
If no network cost savings please explain:
11
FINANCIAL INFORMATIONIdentify Network Costs that the ETSB believes the State will pay for the Consolidated System:
Network Cost Estimated Amount (per year)
___________________________________________________ $________________________
___________________________________________________ $________________________
___________________________________________________ $________________________
___________________________________________________ $________________________
___________________________________________________ $________________________
Other Consolidation Cost
PSAP, CPE, CAD Equipment, logging recorders $___________________________
MSAG and Mapping Development or changes $____________________________
Radio Consoles $____________________________
Construction or Remodel of PSAP $____________________________
Personnel $____________________________
Other (Please place total amount in the blank at the right and explain below). $____________________________
Recurring and Nonrecurring Cost (per year)
Estimated nonrecurring cost for consolidation $____________________________
a) Recurring costs prior to consolidations (all entities) $____________________________
b) Proposed recurring cost for consolidated system $____________________________
c) Net change in recurring costs: a – b = c $____________________________
Revenue (per year)
Projected surcharge revenue $_____________________________
Projected revenue from local governments $_____________________________
Projected revenue from other sources (grants) $_____________________________
Revenue in reserves $_____________________________
Total Revenue $_____________________________
12
FIVE YEAR STRATEGIC PLAN FOR CONSOLIDATION PLAN
(Provide a detailed summary of the proposed system’s operation, including but not limited to, a five-year strategic plan for implementation of the consolidation plan with financial projections)
Narrative:
13
EMERGENCY TELEPHONE SYSTEM BOARD OF DU PAGE COUNTY PRELIMINARY FY16 BUDGET ‐ 5 YEAR PROJECTION
FY16 BUDGET 5 YEAR PROJECTION 10REVENUE SOURCE FY15 FY15 FY16 FY17 FY18 FY19 FY20
BUDGET ACTUAL REQ BUDGET EST. BUDGET EST. BUDGET EST. BUDGET EST. BUDGETCASH IN BANK AT START OF FY 5800 $ 4,693,925 $ 4,693,925 $ 3,423,589 163,438$ 163,438$ ‐$ ‐$ CASH IN BANK AT START OF FY 5810 13,341,454$ 16,773,970$ 17,359,070$ 1,065,163$ 595,166$ 1,305,682$ 2,034,778$ CASH IN BANK AT START OF FY 5820 ‐$ 4,448,674$ 587,481$ (872,770)$ (2,361,736)$ 5800 REVENUE 2,250,000$ $ 1,194,951 149,369$EST REVENUE [LAST HALF OF YR] 5800 370,000$ 5810 REVENUE 5,000,000$ 4,382,167$ 480,000$EST. REIMBURSEMENT FOR AGENCY REQUESTED RF 162,648$ Est REIMBURSEMENT FOR AGENCY RMS 230,400$ 235,002$ 710,517$ 729,096$ 748,544$ ETS REVENUE [LAST HALF OF YR] 5810 950,000$ 5820 REVENUE* 5,391,531$ 8,000,000$ 8,000,000$ 8,000,000$ 8,000,000$ AVAILABLE REVENUE 25,285,379$ 28,527,661$ 27,033,959$ 13,912,278$ 10,056,602$ 9,162,009$ 8,421,586$
BUDGET FY15 FY15 FY16 FY17 FY18 FY19 FY205800 WIRELINE BUDGET 4,067,696$ 2,360,699$ 3,409,520$ 5800 WIRELINE EXPENSE LAST HALF EST 474,588$ 5810 WIRELESS BUDGET 17,164,216$ 2,548,513$ 17,004,307$ 705,000$ 5810WIRELESS EXPENSE LAST HALF EST 2,361,201$ 5820 NEW FUND BUDGET ‐$ ‐$ 11,546,907$ 6,612,632$ 6,274,680$ 7,466,728$ TOTAL BUDGET 21,231,912$ 7,745,001$ 20,413,826$ 12,251,907$ 6,612,632$ 6,274,680$ 7,466,728$
Equipment Replacement FY15 FY15 FY16 FY17 FY18 FY19 FY20Annual encumbrance for equipment replacement 942,857$ 314,286$ 2,847,619$ 3,214,286$ 3,214,286$ Total Reserve for Capital Projects 942,857$ 1,257,143$ 4,104,762$ 7,319,048$ 10,533,334$
CASH RESERVES FY15 FY15 FY16 FY17 FY18 FY19 FY20CASH RESERVES FOR 5800 2,876,229$ 3,423,589$ 163,438$ 163,438$ ‐$ ‐$ CASH RESERVES FOR 5810 1,177,238$ 17,359,070$ 1,065,163$ 595,166$ 1,305,682$ 2,034,778$ 2,783,323$ CASH RESERVES FOR 5820 ‐$ 4,448,674$ 587,481$ (872,770)$ (2,361,736)$ (5,042,750)$ TOTAL RESERVE CASH FOR ALL FUNDS 4,053,467$ 20,782,660$ 5,677,276$ 1,346,085$ 432,912$ (326,958)$ (2,259,428)$ *EQUALIZED SURCHARGE .87 EFFECTIVE JAN 1 2016The 5 year projection is set up to include the major capital expenses being paid out completely (including maintenance) in FY16 and FY17. In reality payments for the CAD system and new CPE will be spreadout across multiple years with maintenance starting possibly in FY19. The value of these purchases has been included at the top end of the bidding scale in order to show the most extreme scenario. In addition, an equipment replacement line item has been included to demostrate more accurately the cash reserve of the ETSB. The 5 yr projection also shows the new fund that will be created to receive the new equalized surcharge or .87 and how ETSB will transition the budget over time.
COMMUNITIES SERVED
Provide a list of all communities to be served by the proposed 9-1-1 System. Please include the name of the community and the official mailing address including street address, city and zip code.
USE ADDITIONAL SHEETS AS NECESSARY
City, Town or Village Street Address, City, Zip Code
14
PARTICIPATING AGENCIES
Provide a list of public safety agencies (Police, Fire, EMS etc.) that are to be dispatched by the 9-1-1 System. Each Agencies land area(s) in square miles and estimated population which will have access to the proposed 9-1-1 System. Do not forget to include County Sheriff’s jurisdiction and Illinois State Police Districts. Each agency that appears on this list should also have signed a call handling agreement.
9-1-1 Participant Agencies Street Address, City, Zip Code Administrative Telephone No.
Direct Dispatch Transfer
Call Relay
If transferring please list the Secondary PSAPs in your system that you will transfer to:
18
19
ADJACENT AGENCIES LIST
Provide a list of public safety agencies and existing 9-1-1Systems that are adjacent to the proposed system’s boundaries. Each agency that appears on this list should also have signed a call handling agreement and/or aid outside jurisdictional boundaries.
AGENCY STREET ADDRESS, CITY, ZIP CODE TELEPHONE NUMBER
18
Adjacent Agencies Oranization Address Line 1 Address Line 3 PHONE AURORA POLICE DEPARTMENT 1200 E. Indian Trail Aurora, IL 60505 630‐256‐5000BERKELEY FIRE DEPARTMENT 5819 Electric Avenue Berkeley, IL 60163 708‐449‐9444BERKELEY POLICE DEPARTMENT 5819 Electric Avenue Berkeley, IL 60163 510‐981‐5900ELGIN POLICE DEPARTMENT 151 Douglas Avenue Elgin, IL 60120 847‐289‐2700HILLSIDE FIRE DEPARTMENT 523 N. Wolf Road Hillside, IL 60162 708‐449‐6133HILLSIDE POLICE DEPARTMENT 425 N. Hillside Avenue Hillside, IL 60162 708‐547‐8684ILLINOIS STATE POLICE 531 Sangamon Avenue Springfield, IL 62702 217‐782‐7345KANE COUNTY SHERIFF 37W755 IL State Route 38, Suite A St. Charles, IL 60175 630‐232‐6840KANECOMM 719 S Batavia Avenue Geneva, IL 60134 630‐232‐8400NAPERVILLE POLICE AND FIRE DEPTS. 1350 Aurora Avenue Naperville, IL 60540 630‐420‐6197NORCOMM PUBLIC SAFETY COMMUNICATIONS INC 2600 N. Mannheim Road Franklin Park, IL 60131 630‐279‐1778NORTHLAKE FIRE PROTECTION DISTRICT 118 E. Parkview Road Northlake, IL 60164 708‐531‐5755NORTHLAKE POLICE DEPARTMENT 55 E. North Avenue Northlake, IL 60164 708‐562‐3182NORTHWEST CENTRAL DISPATCH 1975 E. Davis Street Arlington Heights, IL 60005 847‐398‐1130OFFICE OF EMERGENCY MANAGEMENT CHICAGO 1411 W. Madison Street Chicago, IL 60607 312‐746‐9111PLEASANT VIEW POLICE AND FIRE DEPT. 1970 W Plainfield Road LaGrange, IL 60525 708‐352‐9229ROMEOVILLE FIRE DEPARTMENT 18 Montrose Drive Romeoville, IL 60446 815‐886‐7227ORLAND FIRE PROTECTION DISTRICT 9790 W 151st Street Orland Park, IL 60462 708‐349‐0074SOUTHWEST CENTRAL DISPATCH 7611 W. College Drive Palos Heights, IL 60463 708‐448‐6180TRI‐COM CENTRAL DISPATCH 3823 Karl Madsen Drive St. Charles, IL 60175 630‐232‐4739WESTCHESTER FIRE DEPARTMENT 10240 W. Roosevelt Road Westchester, IL 60154 708‐345‐0433WESTCHESTER POLICE DEPARTMENT 10300 W. Roosevelt Road Westchester, IL 60154 708‐345‐0060WESTERN SPRINGS POLICE DEPARTMENT 740 Hillgrove Avenue Western Springs, IL 60558 708‐246‐8540WILL COUNTY SHERIFF’S OFFICE 14 W. Jefferson St. Joliet, IL 60432 815‐727‐8895WILLOW SPRINGS POLICE DEPARTMENT 8255 Willow Springs Road Willow Springs, IL 60480 708‐839‐2732
CARRIER LISTING(Wireline, Wireless, VoIP)
Provide a list of each carrier that will be involved in the proposed system.
(USE ADDITIONAL SHEETS AS NECESSARY)
CARRIERS STREET ADDRESS, CITY, ZIP CODE TELEPHONE NUMBER
20
9-1-1 System Name: DuPage ETSB
List of Carriers who submit local 9-1-1 Surcharge
Carrier Name Contact Phone Number Street Address City State Zip CodeWireline
(407) 260‐1011 Longwood FL 32750(770) 240‐8773 Atlanta GA 30339(770) 240‐8849 Atlanta GA 30339(407) 260‐1011 Longwood FL 32750(770) 240‐8773 Atlanta GA 30339(913) 859‐9674 Overland Park KS 66212‐3382(949) 838‐3300 Irvine CA 92614Qtr payments Torrance CA 90503(407) 260‐1011 Longwood FL 32750(913) 859‐9674 Overland Park KS 66212‐3382(770) 240‐8849 Atlanta GA 30339(908) 953‐7364 Baskin Ridge NJ 7920(770) 240‐8815 Atlanta GA 30339
Oklahoma City OK 73172‐0218(678) 436‐5590 Duluth GA 30096‐4981
Torrance CA 90503(913) 859‐9674 Overland Park KS 66212‐3382(407) 260‐1011 Longwood FL 32750(312) 681‐8329 Chicago IL 60606‐1260(770) 240‐8815 Atlanta GA 30339(770) 240‐8889 Atlanta GA 30339(407) 260‐1011 Longwood FL 32750(949) 838‐3300 Irvine CA 92614(815) 602‐8510 Kankakee IL 60901(407) 260‐1011 Longwood FL 32750
Alpharetta GA 30005(407) 260‐1011
740 Florida Central Parkway, Ste. 2028 3100 Cumberland Boulevard, Ste.700 3100 Cumberland Boulevard, Ste.700 740 Florida Central Parkway, Ste. 2028 3100 Cumberland Boulevard, Ste.700
8675 W 96th Street, Ste. 22018006 Skypark Circle, Ste.1063838 Carson Street, Ste. 200
740 Florida Central Parkway, Ste. 2028 8675 W 96th Street, Ste. 220
3100 Cumberland Boulevard, Ste.700 211 Mt. Airy Road
3100 Cumberland Boulevard, Ste.700 PO Box 720128
3075 Breckinridge Boulevard, Ste. 425 3838 Carson Street, Ste. 2008675 W 96th Street, Ste. 220
740 Florida Central Parkway, Ste. 2028 2255 West Wacker Drive, 8th Floor 3100 Cumberland Boulevard, Ste.700 3100 Cumberland Boulevard, Ste.700 740 Florida Central Parkway, Ste. 2028
18006 Skypark Circle, Ste.106143 N Schuyler Ave
740 Florida Central Parkway, Ste. 2028 6250 Shiloh Road, Ste. 240
740 Florida Central Parkway, Ste. 2028Longwood FL 32750
5 Link8x8, Inc.AT&T Illinois BellAccess OneAccesslineA C N ANPI Business, LLC Airespring Access Point, Inc.Apptix, inc.AT&T CorpAvayalive, Inc.BirchBlock Line Systems Bridgeconnex / RTC Budget Prepay, Inc. BullsEye ConnectMe, LLCCall One, Inc.Cbeyond Comm, LLC Cincinnati BellClear Rate Comm Comtect21, LLC Converging Networks Group ESCO Technologies Digium Cloud or GS DynalinkUS Xchange of IL/ Earthlink
(512) 301‐1808 Austin TX 78749Torrance CA 90503Easton Telecom Services
EDGE (913) 859‐9674
4301 W William Cannon, Ste.B‐150#291 3838 Carson Street, Ste. 2008675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382
(949) 838‐3300 18006 Skypark Circle, Ste.106 Irvine CA 92614(303) 705‐6522 400 Inverness Pkwy, Ste.330 Englewood CO 80112(512) 301‐1808 4301 W William Cannon, Ste.B‐150#291 Austin TX 78749(770) 240‐8889 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339(407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750
3838 Carson Street, Ste. 200 Torrance CA 90503(913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382(407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750(949) 838‐3300 18006 Skypark Circle, Ste.106 Irvine CA 92614
PO Box 720128 Oklahoma City OK 73172‐01283838 Carson Street, Ste. 200 Torrance CA 905033838 Carson Street, Ste. 200 Torrance CA 90503
(214) 442‐5729 2740 N Dallas Pkwy, Ste.260 Plano TX 750933838 Carson Street, Ste. 200 Torrance CA 905033838 Carson Street, Ste. 200 Torrance CA 90503
(770) 240‐8748 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339(678) 436‐5590 3075 Breckinridge Boulevard, Ste. 425 Duluth GA 30096‐4981(501) 748‐5407 4001 Rodney Parham Road, Attn:Corp Tax ‐ E911 Little Rock AR 72212(770) 240‐8889 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339(770) 240‐8889 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339(212) 607‐2011 55 Water Street, 32 Floor New York NY 10041(770) 240‐8801 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339(800) 676‐7374 248 Spring Lake Dr. Itasca IL 60143
PO Box 720128 Oklahoma City OK 73172‐01285909 NW Expressway, Ste.101 Oklahoma City OK 73132
(407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750(678) 389‐4989 1595 Peachtree Parkway, Suite 204‐337 Cumming GA 30041(501) 748‐5407 4001 Rodney Parham Road, Attn:Corp Tax ‐ E911 Little Rock AR 72212(913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382(913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382(407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750
3838 Carson Street, Ste. 200 Torrance CA 90503(913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382(318) 340‐5317 PO Box 4065 Monroe LA 71211‐4065(913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382
Enhanced CommEssex TelecomFirst CommGranite Telecomm, LLC Globalinx Enterprises, Inc. Interface Security Sys.LLC ITC Global NetworksJive CommLevel 3 Comm. , LLCLine SystemsLingo Inc., BartlettLingo Inc., DuPageMasergy Cloud Comm Matrix DuPageMatrix Oak BrookMCI Metro AccessMcGraw Comm., Inc. Mcleod Telecom Services Megapath Cloud Co Megapath Corp.Met TelMitelmotherGnetFortris Acquisition Co. Network InnovationsNew GlobalNextivaNorth American TelPaetec / Windstream / Nuvox PNG TelecomPreferred Long Distance Premier HostingPrimus Telecomm.Quantum Shift / cCom Sol Qwest / Centurytel Comm, LLC RingcentralRoyal Phone Co, LLC (847) 541‐2775 750 W Lake Cook Road, Ste 110 Buffalo Grove IL 60089
Sage Telecom Co. (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750The Sienna Group (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Single Path (630) 812‐2304 905 Parkview Blvd Lombard IL 60148Small Office Systems (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750S‐Net Comm (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Spectrocel, Inc. (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Sprint Comm. Co. (913) 315‐5777 6500 Sprint Parkway Overland Park KS 66251‐5555Star2Star (913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382Stratus Networks (678) 389‐4989 1595 Peachtree Parkway, Suite 204‐337 Cumming GA 30041Talk America Services (501) 748‐5407 4001 Rodney Parham Road, Attn:Corp Tax ‐ E911 Little Rock AR 72212Talk America, Inc. (501) 748‐5407 4001 Rodney Parham Road, Attn:Corp Tax ‐ E911 Little Rock AR 72212Telecom Man (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Thinking Phone (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Telco Experts (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Teleport LLC (770) 240‐8849 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339Telesphere Networks, Ltd. (913) 901‐5071 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382TDS Metrocom, LLC (770) 240‐8889 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339TNCI Operating Co. (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750TW Telecom (303) 566‐1000 10475 Park Meadow Drive Littleton CO 80124Velocity 7130 Spring Meadow Dr. W Holland OH 43528Woyzze Comm (913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382WANetics (913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382World Discount 1595 Peachtree Parkway, Suite 204‐337 Cumming GA 30041WOW (303) 600‐1873 7887 E Belleview Ave, Ste.1000 Englewood CO 80111Xclutel Comm (512) 301‐1808 4301 W William Cannon, Ste.B‐150#291 Austin TX 78749XO Communications (770) 240‐8815 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339Zayo Enterprise (512) 301‐1808 4301 W William Cannon, Ste.B‐150#291 Austin TX 78749Ymax Bartlett (310) 792‐8081 3838 Carson Street, Ste. 200 Torrance CA 90503Ymax DuPage 3838 Carson Street, Ste. 200 Torrance CA 90503Ymax Roselle 3838 Carson Street, Ste. 200 Torrance CA 90503
VoIP NOS Comm., Inc. (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Phone.com, Inc. (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Bandwidth.com, Inc. (770) 240‐8773 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339Broadview Networks (770) 240‐8783 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339Chicago Business VOIP (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Comcast IP (215) 286‐7347 One Comcast Center Philadephia PA 19103
Comcast Phone of IL (215) 286‐7347 One Comcast Center Philadephia PA 19103Data Net Systems, LLC (913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382eVolve Business (770) 240‐8889 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339eVolve IP, LLC (913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382Equivoice LLC 3838 Carson Street, Ste. 200 Torrance CA 90503Intelafone (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Intermedia Voice (913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382IP Networked Services (770) 240‐8773 3100 Cumberland Boulevard, Ste.700 Atlanta GA 30339Excalibur Technology (847) 850‐1150 700 Fox Glen Barrington IL 60010nexVortex (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Telnet Worldwide, Inc. (913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382VoipStreet, Inc. (407) 260‐1011 740 Florida Central Parkway, Ste. 2028 Longwood FL 32750Vonage Business Sol. (913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382Vonage Tax Account (913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382West IP Comm. (913) 859‐9674 8675 W 96th Street, Ste. 220 Overland Park KS 66212‐3382
Wireless
AT&T (414) 678-4986 845 N. 35th Street Milwaukee WI 53208
Sprint PCS Nextel 1-866-398-3284 6450 Sprint Parkway Overland Park KS 66251
T-Mobile 973-292-5711 12920 SE 38th Street Bellevue WA 980006
US Cellular 206-792-2152 8410 W. Bryn Mawr #700 Chicago IL 60631
Verizon 678-339-6300 2 Verizon Place Alpharetta GA 30004
ATTACHMENTS
Ordinance - Documentation that supports the dissolution of the individual ETSB and it’s replacement with a JOINT ETSB per an intergovernmental agreement once the consolidation plan is approved by the Statewide 9-1-1 Administrator.
Contracts - The contract for a new 9-1-1 system provider or for NG 9-1-1 service.
Intergovernmental Agreement - The agreement creating the Joint ETSB.
Back-up PSAP Agreement - The agreement that establishes back-up service due to interruptions or overflow services between PSAPs.
Network Diagram - Diagram provided by the 9-1-1 System Provider. Re-evaluate P.01 Grade of Service for cost savings and network efficiency.
22
CALL HANDLING AND AID OUTSIDE JURISDICTIONAL BOUNDARIES
AGREEMENT
For 9-1-1 Emergency Communications
This agreement is made between the 9-1-1 Authority, and the (Public Safety Agency)__________________________________ , for the purpose of effective handling and routing of 9-1-1 Emergency calls.
CALL HANDLING
(9-1-1 System Name) __________________________________ receiving a call for emergency services in your jurisdiction shall dispatch the call in the following manner:
Primary: __________________________________ (State Specific Procedures if radio frequency-identity number, if talk group-identify name, if telephone-identity telephone number)
Secondary: __________________________________ (State Specific Procedures if radio frequency-identity frequency number, if talk group-identify name, if telephone-identity number)
AID OUTSIDE JURISDICTION BOUNDARIES
Once an emergency unit is dispatched in response to a request through the system, such unit shall render its service to the requesting party without regard to whether the unit is operating outside its normal jurisdictional boundaries.
The legislative intent is that 9-1-1 be used for emergency calls only. Therefore, all calls of an administrative or non-emergency nature shall be referred to your agency’s published telephone number.
The PSAP Center agrees to keep all records, times, and places of all calls. All records will be available to all participants of the 9-1-1 System.
It shall be the responsibility of your agency to maintain the report of the call and the disposition of each call received.
All agreements, management, records, and service will be the responsibility of the 9-1-1 authority.
_____________________________________ _____________________________________________ 9-1-1 Authority Public Safety Agency
__________________________________ By __________________________________________By
_________________________________ Title _________________________________________Title
23
Call Handling Agreements in this new format will be sent out to our 911 partners
TEST PLAN DESCRIPTION
1) Description of test plan (back-up, overflow, failure, database).
2) List wireline exchanges to be tested.
3) List of wireless and VoIP Carriers to be tested.
24
E9-1-1 NETWORK 4/5/2016
BURR RIDGE
DISPATCHED AT DU COMM
600 WALL ST
GLENDALE HTS
LOMBARD
AT&T ALI DATABASE
BACKUP PSAP
DUPAGE CO
SHERIFF
BURR RIDGE
DISPATCHED AT DUCOMM
RATE CENTER END FFICE
A LINKS
CONTROL OFFICE9-1-1 TRUNKS B LINKS
DATABASE
ACCESS
SUMMIT DS0
AT&T-----------------------------6
CLECA T & T - - - - - - - - - - - - - - - - 2 4C B E Y O N D - - - - - - - - - - - 2C I M C O - - - - - - - - - - - - - - - - - 2
F O C A L - - - - - - - - - - - - - - 8F R O N T I E R - - - - - - - - - - - - 8G L O B A L C O M - - - - - - - 2L E V E L 3 - - - - - - - - - - - - 2
M C I - - - - - - - - - - - 2M c L E O D - - - - - - - - - - - - - - 4MPOWER - - - - - - - - - - - - - -2P A E T E C - - - - - - - - - - - - - - 2 X O C O M - - - - - - - - - - - - 2
LA GRANGE DS0
AT&T-----------------------------6
CLEC
A L L E G I A N C E - - - - - - - - 4A T & T - - - - - - - - - - - - - - - - 2 4F O C A L - - - - - - - - - - - - - - - 8C B E Y O N D - - - - - - - - 2F O C A L - - - - - - - - - - - - - - 8
F R O N T I E R - - - - - - - - - - - - 4G L O B A L C O M - - - - - - - 2LEVEL 3---------------------2M C I - - - - - - - - - - - - - - - - - - - 2
M c L E O D - - - - - - - - - - - - - - 4M G C - - - - - - - - - - - - - - - - - - 2P A E T E C - - - - - - - - - - - - - - 4 X O C O M - - - - - - - - - - - - - - 2
HINSDALE DS0 /OAKBROOK DS0
AT&T---------------------------11
CLECA L L E G I A N C E - - - - - - - - 2A T & T - - - - - - - - - - - - - - - 1 6C B E Y O N D - - - - - - - - 2
C I M C O - - - - - - - - - - 2F O C A L - - - - - - - - - - - - - - - 6F R O N T I E R - - - - - - - - - - - - 8G L O B A L C O M - - - - - - - 2
I N T E R M E D I A - - - - - - - - - 2L E V E L 3 - - - - - - - - - - - - - 4M C I - - - - - - - - - - - - - - - - - - - 6M c L E O D - - - - - - - - - - - - 4M G C - - - - - - - - - - - - - - - - - - 2
P A E T E C - - - - - - - - - - - - - - - 2 TDS METROCOM----------2X O C O M - - - - - - - - - - - - - - 4
(7) Wireline Trunks Zone1 / 1A 7EMNC849042 7EMNC849043
7EMNC849063 7EMNC849064 TG 6297UGXR103229 Make Busy7EMNC849066 7EMNC8490677EMNC849068
TG 6317UGXR177183
3FDDZ695061-Southfield7FDDZ695060-Northbrook
PROPOSED CHANGES 2016
365775_1
AN INTERGOVERNMENTAL AGREEMENT
BETWEEN THE COUNTY OF DUPAGE, THE DUPAGE COUNTY
EMERGENCY TELEPHONE SYSTEM BOARD AND THE VILLAGE OF BURR
RIDGE AUTHORIZING THE TRANSFER OF THE VILLAGE OF BURR RIGE
EMERGENCY TELEPHONE SYSTEM BOARD 9-1-1 SERVICE AND
OPERATIONS TO THE DUPAGE COUNTY EMERGENCY TELEPHONE
SYSTEM BOARD 9-1-1 SYSTEM
WHEREAS, the County of DuPage is a unit of local government organized as a
county under township organization as set forth in the Counties Code, the corporate
powers of which are exercised by its County Board; and
WHEREAS, in 1989, a majority of electors in County of DuPage authorized the
County Board to impose a monthly surcharge upon billed subscribers of certain wired
telephone network connections provided by telecommunication carriers for the purpose
of installing or improving an emergency telephone service to respond to calls to 9-1-1;
and
WHEREAS, the DuPage County Emergency Telephone System Board (“DuPage
ETSB”) was created by Section 15.4 of the Illinois Emergency Telephone System Act, 50
ILCS 750/15.4 and ordinance of the DuPage County Board for the purpose of planning
and implementing a 9-1-1 emergency telephone system in DuPage County; and
WHEREAS, in 1989 a majority of electors in Village of Burr Ridge authorized
the Village to impose a monthly surcharge upon billed subscribers of certain wired
telephone network connections provided by telecommunication carriers for the purpose
of installing or improving an emergency telephone service to respond to calls to 9-1-1;
and
WHEREAS, as a consequence of the timing of the referendum in the Village of
Burr Ridge, the territory within the corporate limits of the Village of Burr Ridge was
excluded from the emergency telephone system area served by the DuPage ETSB and the
Village of Burr Ridge;
WHEREAS, in order administer and fund the 9-1-1 emergency telephone system
services within its system area, the Village of Burr Ridge by ordinance created the
Village of Burr Ridge ETSB under the authority of the Illinois Emergency Telephone
System Act, 50 ILCS 750/1 et seq.;
WHEREAS, DuPage ETSB was previously issued a Certificate of Authority to
operate a 9-1-1 system by the Illinois Commerce Commission and has since operated as a
multi-member 9-1-1 system that serves residents of DuPage County and member
agencies, but excludes the emergency telephone system area served by the Burr Ridge
ETSB; and
365775_1
WHEREAS, since its creation, the Village of Burr Ridge ETSB has collected 9-
1-1 surcharge fees from the users of wireline and wireless telephone service of the
Village of Burr Ridge and has administered a 9-1-1 system that has contracted for 9-1-1
services from a centralized dispatch facility, the Southwest Central Dispatch in Palos
Heights, Illinois, to serve the residents of the Village of Burr Ridge; and
WHEREAS, Public Act 99-0006, effective January 1, 2016 (50 ILCS
750/15.4a(a)(2)) requires any 9-1-1 emergency telephone system board that serves fewer
than 25,000 people to consolidate its emergency telephone services; and
WHEREAS, the Village of Burr Ridge has filed its Consolidation Waiver
Request with the Illinois Statewide 9-1-1 Advisory Board and the Statewide 9-1-1
Administrator seeking to dissolve the Village of Burr Ridge ETSB as an administrative
entity and include the Village of Burr Ridge in the emergency telephone system area
served by the DuPage ETSB; and
WHEREAS, in order to comply with the terms of Public Act 99-0006, the
Village of Burr Ridge is terminating its ETSB; is terminating its contract for dispatch
services with its current service provider, Southwest Central Dispatch; and has filed a
plan modification with the Illinois Statewide 9-1-1 Advisory Board and the Statewide 9-
1-1 Administrator to contract with DuPage Public Safety Communications (DU-COMM).
to provide dispatch services; and
WHEREAS, this application has been granted and the Village of Burr Ridge has
become a member of DU-COMM which shall provide emergency telephone dispatch
services for 9-1-1 calls originating within the Village of Burr Ridge; and
WHEREAS, it is the intention of the parties hereto that the Village of Burr Ridge
and County of DuPage enter into this Agreement regarding the emergency telephone
system area currently served by the DuPage ETSB such that the Village of Burr Ridge is
included in such system area and be served by the DuPage ETSB in the manner the
DuPage ETSB serves the other communities within its system area;; and
WHEREAS, this Agreement will facilitate the required goal of consolidation of
the emergency telephone system areas currently served by the Village of Burr Ridge
ETSB and the DuPage ETSB to reduce the number of area emergency telephone system
boards; and
WHEREAS, the Village of Burr Ridge ETSB is an administrative emergency
telephone system board, does not operate a PSAP, and therefore there is no consolidation
of PSAPs involved with the Village of Burr Ridge dissolution of the Village of Burr
Ridge ETSB administrative system; and
WHEREAS, the Village of Burr Ridge and DuPage ETSB have determined that
it is in the best interests and will further the public safety of the residents of DuPage
County and the Village of Burr Ridge for the Village of Burr Ridge to dissolve its
365775_1
administrative 9-1-1 ETSB and to enter into this Agreement to include the Village of
Burr Ridge in the emergency telephone system area currently served by the DuPage
ETSB (“Agreement”); and
WHEREAS, the DuPage ETSB and the Village of Burr Ridge have the authority
under the terms of Article VII, Section 10 of the Illinois Constitution of 1970 and the
Intergovernmental Cooperation Act, 5 ILCS 220/1 to enter into agreements to further the
purposes of their organizations; and
WHEREAS, 83 Ill. Adm. Code 1325.200 and 83 Illinois Administrative Code
Part 1325.205 permit 9-1-1 authorities to enter into an intergovernmental agreement to
modify their respective 9-1-1 systems’ service area for the purpose of including or
excluding residents within a 9-1-1 service area; and
WHEREAS, it is the desire of the Village of Burr Ridge and the County of
DuPage on their own behalf and on behalf of their respective emergency telephone
system boards as parties hereto to enter into this Intergovernmental Agreement, in
accordance 83 Ill. Adm. Code 1325.200, 83 Ill. Adm. Code 1325.205, Section 10 of
Article VII of the Constitution of the State of Illinois of 1970, and the Illinois
Intergovernmental Cooperation Act, to modify the DuPage ETSB service area to allow
the Village of Burr Ridge to dissolve its current administrative 9-1-1 ETSB system in
order to become a member of DuPage ETSB, thereby making DuPage ETSB the 9-1-1
system with full authority and control over the 9-1-1 emergency dispatch services for the
Village of Burr Ridge.
NOW THEREFORE IT IS AGREED BY THE DUPAGE COUNTY EMERGENCY
TELEPHONE SYSTEM BOARD (“DuPage ETSB”) AND THE VILLAGE OF
BURR RIDGE AS FOLLOWS:
1. The foregoing recitals to this Agreement are a material part of this Agreement and
incorporated herein as if they were fully set forth in this section.
2. The area presently comprising the DuPage Emergency Telephone System Area
and served by the DuPage ETSB shall be expanded to include the emergency
telephone system area currently served by the Village of Burr Ridge ETSB.
3. There will be no interruption of emergency services or the dispatching of
emergency services to the emergency telephone system area presently served by
the Village of Burr Ridge ETSB during the dissolution and termination of the
Village of Burr Ridge ETSB and transition to the DuPage ETSB.
4. The County of DuPage and the Village of Burr Ridge agree that to the extent that
the provisions of Public Act 99-0006 or the Emergency Telephone System Act,
50 ILCS 750/1 and/or those Illinois Administrative regulations 83 Ill. Adm. Code
Parts 1324, 1325 and 1328 regarding consolidation and standards of service for 9-
365775_1
1-1 systems in Illinois require or result in any authority or power of any kind to be
shared jointly and equally between the Village of Burr Ridge and the County of
DuPage, the Village of Burr Ridge hereby waives and relinquishes any such joint
decision-making authority or shared powers, other than those enjoyed by all
entities served by the DuPage ETSB.
5. The Village of Burr Ridge has filed, or commits to file with the Office of the
Statewide 9-1-1 Administrator all requisite documentation to complete and
implement this Agreement.
6. All 9-1-1 surcharge monies currently paid to the Burr Ridge 9-1-1 ETSB and
collected from the Village of Burr Ridge emergency telephone system area shall
be paid directly to DuPage ETSB upon and after the approval of the modification
of the Village of Burr Ridge 9-1-1 Plan.
7. All 9-1-1 surcharge monies collected prior to and after the effective date of this
Agreement but prior to the effective date of the transfer and earmarked as Village
of Burr Ridge allocated reserve funds shall remain the property of the Village of
Burr Ridge to be credited or otherwise dedicated to services exclusively for of the
use of the Village of Burr Ridge, consistent with the spending authority under the
Emergency Telephone System Act and the DuPage ETSB shall have no claim on
such funds, except as may be agreed upon between the DuPage ETSB and the
Village of Burr Ridge.
8. This transfer and merger shall be subject to the approval of the Illinois State
Police and the Office of the Statewide 9-1-1 Administrator.
9. This transfer and merger will be effective upon final approval and execution of
this Intergovernmental Agreement and the approval of the Illinois State Police
and the Office of the Statewide 9-1-1 Administrator.
10. The County of DuPage and the Village of Burr Ridge understand that the
participation of the County, a unit of local government, is required solely for the
execution of this Agreement on behalf of the DuPage ETSB and for no other
purpose. Upon execution, the County shall have no other duties, rights, or
responsibilities with respect to the Agreement. The DuPage ETSB shall reimburse
the County for the expenses the County may incur as a result of this Agreement as
permitted by the Emergency Telephone System Act
11. The DuPage ETSB and the Village of Burr Ridge, by joint resolution, agree that
Burr Ridge has chosen to utilize DuPage Public Safety Communications (DU-
COMM) PSAP to provide 9-1-1 emergency police, fire, and ambulance telephone
dispatch services and that the DuPage ETSB consents to the Village of Burr
Ridge’s selection of DU-COMM as its PSAP.
365775_1
12. The Waiver, dated June XX, 2016, filed with the Office of the Statewide 911
Administrator with the Department of the Illinois State Police shall be
incorporated into this Agreement and attached as Exhibit A.
13. This Agreement shall become effective upon its approval by the parties and upon
the approval by the Illinois Statewide 9-1-1 Advisory Board and the Statewide 9-
1-1 Administrator of the Plan Modification submitted by the Village of Burr
Ridge.
14. Upon its effective date as set forth herein, this Agreement shall remain in effect so
long as Village of Burr Ridge remains part of the emergency telephone system
area served by the DuPage ETSB. If either party fails to perform a material
obligation under this Agreement, the other party may consider the non-performing
party to be in default (unless a force majure causes the failure) and may assert a
default claim by giving the non-performing party a written and detailed notice of
default. The defaulting party will have thirty (30) days after receipt of the notice
of default to either cure the default, or if the default is not curable within thirty
(30) days, provide a written cure plan. The defaulting party will begin
implementing the cure plan immediately after receipt of notice by the other party
that it approves the plan. If a defaulting party fails to cure the default as provided
above, unless otherwise agreed to in writing, the non-defaulting party may
terminate the Agreement. If the non-defaulting party wishes to terminate this
Agreement for reasons of default, it shall provide notice in writing to the other
party of its intent to terminate the Agreement at least thirty (30) days before the
intended date of termination. Obligations, including amounts due and owing,
services, or equipment shall be paid or honored up to the date of termination. If
either one of the parties wishes to terminate this Agreement for convenience (a
reason other than for default), it shall provide notice in writing to the other party
of its intent to terminate the Agreement at least sixty (60) days before the intended
date of termination. Obligations, including amounts due and owing, services, or
equipment shall be paid or honored up to the date of termination. This Agreement
shall cease to be effective upon the enactment of any federal or state statute, rule,
or regulation that materially impairs the ability of one or both parties to perform
their obligations under the Agreement.
15. Any notices required to be given pursuant to this Agreement shall be in writing
and addressed to the parties at their respective addresses set forth below. All such
notices shall be deemed duly given if personally delivered, or if deposited in the
United States mail, registered or certified return receipt requested, or upon receipt
of facsimile transmission. Notice given as provided herein does not waive service
of summons or process.
If to DuPage ETSB:
421 North County Farm Road
Wheaton, IL 60187
365775_1
If to DuPage County:
421 North County Farm Road
Wheaton, IL 60187
If to Burr Ridge:
7660 County Line Road
Burr Ridge, IL 60527
16. Indemnification. Reserved.
17. This Agreement shall be governed by and construed in accordance with the laws
of the State of Illinois without regard to any conflict of law or choice of law
principles. The Parties expressly agree that the exclusive venue for any disputes
arising under this shall be the Circuit Court of the Eighteenth Judicial Circuit,
DuPage County, Illinois.
18. The Parties may amend this Agreement upon their mutual written consent.
19. This Agreement shall not be construed in such a way that DuPage County, the
DuPage ETSB, Burr Ridge, or Burr Ridge ETSB, is or deemed to be, the
representative, agent, employee, partner, or joint venture of the other. The parties
shall not have the authority to enter into any agreement, nor to assume any
liability, on behalf of the other party, nor to bind or commit the other party in any
manner, except as expressly provided herein. This Agreement does not create a
joint ETSB between DuPage ETSB and Burr Ridge ETSB or a joint ETSB
between DuPage ETSB and Burr Ridge, or any combination of the parties to this
Agreement.
DATED this _______ day of ________________, 2016.
Dan Cronin
County Board Chairman
County of DuPage
Gary Grasso
Chairman
DuPage County Emergency Telephone System Board
365775_1
ATTEST:
Paul Hinds
Clerk
County of DuPage
Mickey Straub
Mayor
Village of Burr Ridge
ATTEST:
Karen Thomas
Village Clerk
Village of Burr Ridge
Board approved membership: 01/15/2013
Board approved membership: 01/15/2013
1
POLICY
Title: Information Technology and Network Security Policy Policy No: ETS 12 001 TABLE OF CONTENTS Section Page
1. Introduction 2 2. Policy 2 3. Roles and Responsibilities 2
3.1 Agency Administrative Officials Key Security Elements 2 3.2 Providers 3 3.3 Users 3
4. Key Security Elements 3 4.1 Logical Security 3 4.2 Physical Security 3
5. Privacy and Confidentiality 3 6. Compliance with Law and Policy 4 7. Department Security Contact Policy 4
7.1 Purpose 4 7.2 Background 4 7.3 Requirements 4
8. Minimum Security Standards for Network Devices 4 8.1 Summary 5 8.2 Who Should Read this Policy 5 8.3 Why We Have a Minimum security Standard for Network Devices 5 8.4 Responsibilities 6 8.4.A DuPage ETSB System Coordinator 6 8.4.B Agency Administrative Officials 6 8.4.C System Administrators 6 8.4.D Departments, Users and Individuals 6
9. Procedures 6 9.1 Minimum Standards 6 9.2 Exceptions 6
9.3 Revising Minimum Standards 6 10. Guidelines and Procedures for Blocking Network Access 6
10.1 Purpose 6 10.2 Guidelines 7 10.3 Procedures 7 10.4 Recourse 7
11. Utilization of DuPage ETSB 9-1-1 Public Safety Applications and Equipment
7
11.1 DuPage ETSB 9-1-1 Public Safety Applications 7 11.2 DuPage ETSB 9-1-1 Network Equipment 8 11.3 DuPage ETSB 9-1-1 Network Communication Systems 8
EMERGENCY TELEPHONE SYSTEM BOARD OF DU PAGE COUNTY
421 N. County Farm Road Wheaton, Illinois 60187 Main: 630-550-7743 Fax: 630-955-1130
2
Appendix A: Software Patch Updates 9 Appendix B: Minimum Standards for Security of DuPage ETSB 9-1-1 a S System Networked Devices
10
Appendix C: Implementing Guidelines for the Minimum Standards for Se Security of DuPage ETSB 9-1-1 System Network Devices
12
Appendix D: Utilization of Public Safety Applications on the DuPage S ETSB 9-1-1 System Networks
16
Appendix E: Utilization of DuPage ETSB 9-1-1 Network Equipment 17 Appendix F: User Form 18 Appendix G: Network Systems Access Request Form 19 Appendix H: Memorandum Of Understanding – Information Technology and Network Security Access
20
1. INTRODUCTION: In order to provide a secure 9-1-1 information and network system to the public safety agencies of the DuPage Emergency Telephone System Board [“DuPage ETSB], the DuPage ETSB 9-1-1 System is committed to providing a secure yet open network that protects the integrity and confidentiality of information while maintaining its accessibility. 2. POLICY: Each member of the DuPage ETSB is responsible for the security and protection of electronic information resources over which the agency has control. Resources to be protected include networks, computer/workstations, software, and data. The physical and logical integrity of these resources must be protected against threats such as unauthorized intrusions, malicious misuse, or inadvertent compromise. Activities outsourced to off-site entities must comply with the same security requirements as in-house activities and receive prior approval from the DuPage ETSB. 3. ROLES AND RESPONSIBILITIES: Responsibilities range in scope from security controls administration for a large system to the protection of a user’s own access password. A particular user often has more than one role. 3.1 Agency Administrative Officials (individuals with administrative responsibility for public safety agencies must:
Identify the electronic information resources within areas under their control; Define the purpose and function of the resource; Establish acceptable levels of security risk for resources by assessing factors such as:
o How sensitive the data is, such as arrest data or information protected by law or policy, o The level of criticality or overall importance to the continuing operation of the system as a
whole, individual departments, units or other essential activities , o How negatively the operations of one or more units would be affected by the
unavailability or reduced availability of resources, o How likely it is that a resource could be used as a platform for inappropriate acts towards
other entities, o Limits of available technology, programmatic needs, costs, and staff support,
Ensure that requisite security measures are implemented for the resource.
3
3.2 Providers [individuals who design, manage and operate the agency’s electronic information resources, e.g. project managers, system designers, application programmers, or system administrators) must:
Be knowledgeable regarding relevant security requirements and guidelines; Analyze potential threats and the feasibility of various security measures in order to provide
recommendations to the 9-1-1 System Coordinator and the ETS Board members; Implement security measures that mitigate threats, consistent with the level of acceptable risk
established by administrative policy; Establish procedures to ensure that privileged accounts are kept to a minimum and that privileged
users comply with privileged access agreements.
3.3 Users (individuals who access and use DuPage ETSB 9-1-1 System resources) must:
Be knowledgeable regarding relevant security requirements and guidelines; Protect the resources under their control, such as access passwords, computer/workstations, and
data they download. Insufficient security measures at any level may cause resources to be damaged, stolen, or become a liability to the system. Therefore, responsive actions may be taken. For example, if a situation is deemed serious enough, computer/ workstations(s) posing a threat will be blocked from network access. (Section 10: Guidelines and Procedures for Blocking Network Access specify how the decision to block is made and the procedures involved.) 4. KEY SECURITY ELEMENTS 4.1 Logical Security: Computer/ workstations must have the most recently available and appropriate software security patches, commensurate with the identified level of acceptable risk. For example, installations that allow unrestricted access to resources must be configured with extra care to minimize security risks. Adequate authentication and authorization functions must be provided, commensurate with appropriate use and the acceptable level of risk. Attention must be given not only to large systems but also to computer/workstation(s) which, if compromised, could constitute a threat to the agency’s or 9-1-1 resources, including computer/workstation(s) maintained for a small group or for an individual's own use. 4.2 Physical Security: Appropriate controls must be employed to protect physical access to resources, commensurate with the identified level of acceptable risk. These may range in scope and complexity from extensive security installations to protect a room or facility where server machines are located, to simple measures taken to protect a User's display screen. 5. PRIVACY AND CONFIDENTIALITY Applications must be designed and computer/ workstation(s) must be used so as to protect the privacy and confidentiality of the various types of electronic data they process, in accordance with applicable laws and policies. Users who are authorized to obtain data must ensure that it is protected to the extent required by law or policy after they obtain it. For example, when sensitive data is transferred from a well-secured network system to a User's location, adequate security measures must be in place at the destination computer/workstation to protect this "downstream data". Technical staff assigned to ensure the proper functioning and security of 9-1-1 resources and services are not permitted to search the contents of electronic communications or related transactional information not owned or managed by the DuPage ETSB 9-1-1 System. For example, any scanning of network traffic to detect intrusive activities must be used in a way to protect any personal information that may be captured during the scanning for possible intrusive activities and must be in compliance with laws and policies protecting the privacy of the information.
4
6. COMPLIANCE WITH LAW AND POLICY: Departments, units, or groups should establish security guidelines, standards, or procedures that refine the provisions of this Policy for specific activities under their purview, in conformance with this Policy and other applicable policies and laws. The following activities are specifically prohibited under this Policy:
Interfering with, tampering with and/or disrupting resources; Intentionally transmitting any computer/workstation viruses, worms, or other malicious software; Attempting to access, accessing, or exploiting resources the user is not authorized to access; Knowingly enabling inappropriate levels of access or exploitation of resources by others; Downloading sensitive or confidential electronic data/information to computer/workstation(s) that
are not adequately configured to protect the system from unauthorized access; Disclosing any data/information that the user is not authorized to be disclosed.
7. DEPARTMENT SECURITY CONTACT POLICY 7.1 Purpose The purpose of this policy is to ensure that DuPage ETSB public safety agencies can be contacted in the event of a computer/ workstation or network security incident. The ability to quickly contact responsible departmental personnel and have them take appropriate action can mitigate the negative effects of an incident both locally in the department and more globally throughout the DuPage ETSB 9-1-1 System. 7.2 Background Risks to the DuPage ETSB 9-1-1 System are very serious. The loss or corruption of information or access to information on workstations and servers could greatly hinder public safety work. The DuPage ETSB 9-1-1 System has a responsibility to secure its computer/ workstation(s) and networks and to respond quickly to threats to the integrity of systems and data. A compromised computer/workstation in one department can easily be used as a springboard to launch attacks on computer/workstation(s) in other departments. Because of these risks, DuPage ETSB 9-1-1 System personnel must take action when they become aware of a security incident specifically involving a DuPage ETSB 9-1-1 System computer/workstation. In cases where the incident poses a potentially serious threat to 911 information system resources, the computer/workstation will be immediately blocked from network access. When a problem computer/workstation is identified, whether or not it is blocked from network access, DuPage ETSB 9-1-1 System personnel must be able to quickly contact someone in the appropriate public safety agency who can take action and/or pass the information on to the appropriate departmental support personnel. Quickly reaching a departmental contact is also important so that any affected user(s) may be informed of the situation. In addition, DuPage ETSB 9-1-1 System personnel will inform this contact person of possible irregularities such as computer/workstation(s) with configuration problems that could negatively impact the network or that appear to be infected with a virus. 7.3 Requirements To implement this procedure, each agency needs to appoint a contact and one or more backup contacts. All contacts for a given agency should be reachable through a single phone number. Contacts must respond to incident reports from DuPage ETSB 9-1-1 System staff and pass them on to responsible departmental or third party support personnel as appropriate. Contacts need to have some familiarity with the computer/workstation(s) in their department and be able to determine who a responsible technical person is; it is not necessary for the contact to have extensive security expertise. Security contacts are responsible for ensuring that appropriate personnel take action in response to each security incident (including escalating the incident to an appropriate departmental authority if action is not taken) and that resolution of each incident is reported to the DuPage ETSB 9-1-1 System Administrator. 8. MINIMUM SECURITY STANDARDS FOR NETWORK DEVICES 8.1 Summary
5
Access to and use of the DuPage ETSB 9-1-1 System network services are privileges accorded at the discretion of the DuPage 9-1-1 Emergency Telephone System Board. Devices connected to the DuPage ETSB 9-1-1 System network must comply with the minimum standards for security set by the DuPage ETSB 9-1-1 System Coordinator. Devices that host restricted data are required to conform to more rigorous security standards. Agencies may develop stricter standards for themselves. Devices that do not meet minimum standards for networked host security configurations may be disconnected. 8.2 Who Should Read this Policy
Chiefs and Department Heads; System Administrators; Users: Individuals working with networks, computer/workstations, workstations, software and
data. The Chief and/or Department Head shall be responsible to execute the User Form [Appendix D] which serves as acknowledgement and responsibility for the users of their agency. The Chief and/or Department Head shall submit the User Form to the DuPage ETSB 9-1-1 System Coordinator within 60 days of receipt of this policy. Executing this document for the agency ensures that the Department Head, System Administrators and Users have read this policy. Failure to submit the User Form can result in the DuPage ETSB 9-1-1 System Administrator blocking access to the Network system until compliance is met. [Section 10] This form will be updated annually. However, changes in the contact information should be submitted immediately to the DuPage ETSB 9-1-1 System Coordinator on a new form. 8.3 Why We Have a Minimum security Standard for Network Devices The DuPage ETSB 9-1-1 System encourages the use of its network in support of Public safety. However, this resource is limited and vulnerable to attack. The DuPage ETSB, therefore; reserves the right to deny access to its network by devices that do not meet its standards for security. This policy requires compliance with minimum security standards to help protect not only the individual device, but other devices connected to the DuPage ETSB 9-1-1 System network. The policy is also intended to prevent exploitation of DuPage ETSB 9-1-1 System resources by unauthorized individuals. The policy applies to all devices connected to the 911 network or using a DuPage ETSB 9-1-1 System Internet Protocol (IP) address to originate communications. Devices include computer/workstations, printers, or other network appliances, as well as hardware connected to the 9-1-1 network from behind firewalls or Network Address Translation (NAT) systems. 8.4 Responsibilities 8.4.A DuPage ETSB System Coordinator:
Provides direction, planning and guidance about information security; Develops and reviews DuPage ETSB System information security policy and procedures; Oversees the creation of the minimum security standards for network devices with technical staff; Approves exceptions to minimum security standards; Works with the users in the public safety community to protect computer/workstation(s), devices,
and the 9-1-1 network infrastructure from electronic attack; When necessary, blocks access to the 9-1-1network in accordance with Guidelines and
Procedures for Blocking Network Access. 8.4.B Agency Administrative Officials:
Shall ensure that devices connected to the 9-1-1 network from their department are supported by an administrator or user with the ability to maintain minimum security standards.
6
8.4.C System Administrators:
Are the designated person(s) within an agency with the ability to maintain minimum security standards;
Shall ensure compliance with the minimum security standards set forth in the Procedures section of this policy;
Such assigned person(s) for the agency will provide contact information to the DuPage ETSB. If an agency does not provide contact information, the designee will be the department head.
8.4.D Departments, Users and Individuals:
Shall ensure that they use devices that comply with the minimum standards set forth in this policy;
Function as the system administrator in the absence of an assigned system administrator; 9. PROCEDURES 9.1 Minimum Standards Minimum security standards for devices attached to the DuPage ETSB 9-1-1 System network are attached in this document as Appendix A: Minimum Standards for Security of DuPage ETSB 9-1-1 System Networked Devices. These standards change periodically. Network device users should consult the DuPage ETSB 9-1-1 System Office to make sure they have the latest security standards before upgrading or changing their equipment. Implementing guidelines that provide more information about complying with minimum security standards are attached to this document as Appendix B page 17: (Implementing Guidelines for the Minimum Standards for Security of DuPage ETSB 9-1-1 System Networked Devices). 9.2 Exceptions Departments, units, or individuals unable to comply with the minimum security standards for the DuPage ETSB 9-1-1 System networked devices but wishing to connect to the network must identify resources that will assist them (on an ongoing basis) in becoming compliant. Devices that do not comply with the minimum standards are subject to exclusion from the 9-1-1 network. Departments, units, or users who believe their devices require configurations that do not comply with the minimum security standards for 9-1-1 networked devices may request connection to the 9-1-1 network on an exceptional basis. Requests for such exceptions should be directed to the System Administrator, which will process the request for final approval by the 9-1-1 System Coordinator. 9.3 Revising Minimum Standards Changes to the minimum security standards for networked devices will be approved by the 9-1-1 System Coordinator of the DuPage ETSB 9-1-1 System. 10. GUIDELINES AND PROCEDURES FOR BLOCKING NETWORK ACCESS 10.1 Purpose DuPage ETSB 9-1-1 System administrators must take immediate action to mitigate any threats that have the potential to pose a serious risk to DuPage ETSB 9-1-1 information system, resources or public safety databases. If the threat is deemed serious enough, the computer/workstation(s) posing the threat will be blocked from network access. These guidelines specify how the decision to block is made and the procedures involved.
7
10.2 Guidelines DuPage ETSB 9-1-1 System personnel have the authority to evaluate the seriousness and immediacy of any threat to DuPage ETSB 9-1-1 System information, system resources or public safety databases and to take action to mitigate the threat. Action that is taken will be responsible and prudent based on the risk associated with that threat and the potential negative impact to the DuPage ETSB 9-1-1 System caused by making the offending computer/workstation(s) inaccessible. Examples of threats that are serious enough to invoke these procedures are:
The level of network activity is sufficiently large as to cause serious degradation in the performance of the network;
System administrative privilege has been acquired by someone who is not supposed to have it; An attack on another computer/workstation or network has been launched; Confidential, private or proprietary electronic information or communications are being collected; Continued complaints have been received regarding inappropriate activity and no response has
been received from the departmental contact regarding the incident. 10.3 Procedures Users can be blocked from the network system:
1. If they fail to complete the User Form Appendix D]. 2. If the threat is immediate, the offending computer/workstation(s) will be blocked immediately and
notification will be sent to the department Chief Administrator immediately that the block has occurred.
3. If the threat is not immediate, notification of the threat will be sent to the department Chief Administrator via email. If a response is not received within 4 hours indicating that the department is taking action to mitigate the threat, the offending computer/workstation(s) will then be blocked.
In instance 1, execution of the User Form is required. In instance 2 or 3, the DuPage ETSB 9-1-1 System personnel will work with the department Chief administrator and/or the system administrator(s) to ensure that the computer/workstation(s) are properly re-secured. If a block has been put in place it will be removed when both the department and DuPage ETSB 9-1-1 System personnel agree that the problem causing the incident has been sufficiently addressed. 10.4 Recourse If a department feels that a computer/workstation has been inappropriately blocked it may request a review of the decision by the 9-1-1 System Coordinator. If, after the review, there is still a disagreement with the decision, it may be further reviewed by the DuPage Emergency Telephone System Board. 11. UTILIZATION OF DUPAGE ETSB 9-1-1 PUBLIC SAFETY APPLICATIONS AND NETWORK EQUIPMENT 11.1 DuPage ETSB 9-1-1 Public Safety Applications The DuPage ETSB provides and manages several public safety application systems for use with Emergency 9-1-1 dispatch services. The use of these systems is restricted to authorized personnel. The use of these systems by unauthorized personnel may result in the blocking of specific computer/workstation(s) and/or the disabling of use accounts. Additional information regarding the proper use of DuPage ETSB 9-1-1 public safety applications can be found in Appendix D.
8
11.2 DuPage ETSB 9-1-1 Network Equipment The DuPage ETSB provides and manages equipment for use with Emergency 9-1-1 dispatch services. The equipment includes but is not limited to;
CAD workstations; UPS battery backup systems; Network routers and switches; Telephone voice loggers; Emergency 9-1-1 telephone systems
The use of this equipment for any purpose other than that intended by the DuPage ETSB is prohibited and may result in computer/workstations(s) being blocked from the DuPage ETSB 9-1-1 Network system. Additional information regarding the proper use of DuPage ETSB 9-1-1 equipment can be found in Appendix E and the CAD Workstation Acceptable Use Policy. 11.3 DuPage ETSB 9-1-1 Network Communications Systems The DuPage ETSB 9-1-1 communications networks were implemented to provide Emergency 9-1-1 dispatch services through public safety applications. To provide a secure and accessible communications network the DuPage ETSB shall restrict network connectivity and only permit access to approved systems. These restrictions shall be implemented through the use of network firewalls and access control lists. All DuPage ETSB 9-1-1 public safety applications listed in section 11.1 and Appendix D are considered approved. Any system not owned or managed by the DuPage ETSB shall be considered unapproved and will be blocked from the DuPage ETSB 9-1-1 network communication systems without specific approval by the DuPage ETSB. To obtain approval for network access by a system not owned or managed by the DuPage ETSB agencies will be required to complete the DuPage ETSB 9-1-1 Network Systems Access Request Form which can be found in Appendix G. Additionally, agencies will be required to submit a Memorandum Of Understanding – Information Technology and Network Security Access, authorized and
executed by their appropriate corporate authorities or a department head that has the designated the
authority to approve it. The Memorandum Of Understanding – Information Technology and Network
Security Access can be found in Appendix H.
Approved:
Policy adopted on: ____April, 12, 2012__________
9
Appendix A: Software Patch Updates DuPage ETSB 9-1-1 System networked devices must run software for which security patches are made available in a timely fashion. They also must have all currently available security patches installed. Exceptions may be made for patches that compromise the usability of critical applications. What are "security patches" and why do I need to keep my software up-to-date?
Security patches are updates to software that eliminate vulnerabilities that, when exploited, will compromise the security of the device. These updates are required for operating systems, application software, firmware, or any other software operating on the device. The majority of devices that are compromised are done so through the exploitation of security vulnerability that could have been eliminated with an already-released security patch. Almost every major worm or virus outbreak could have been prevented had users applied current security patches.
What does "software for which security patches are made available in a timely fashion" mean?
If security vulnerability is found for a piece of software, a software update that eliminates that vulnerability must be made available in a timely fashion. If an update is not made or will not be made within a reasonable amount of time, that software cannot run on the networked device. The DuPage ETSB 9-1-1 System Administrator is responsible for determining whether or not a security patch is being "made available in a timely fashion".
What if my critical software cannot be patched, will I be blocked from the network?
An agency or device may be blocked from accessing the network unless the agency system administrator requests an exception from the DuPage ETSB 9-1-1 System Administrator and your request is granted. If the application is determined to be critical but contains a security vulnerability that warrants a network block, an exception will most likely require the mitigation of the vulnerability through other means.
How do I ensure that my software has all currently available security patches installed? It is very important to keep yourself apprised of security updates to all of the software on your machine. The easiest way to do this is to check the software vendor or developer's website on a regular basis or to join a mailing list that keeps users informed about security vulnerabilities and updates. Information about how to join this list, if it exists for the application, will almost always be available on the vendor or developer's site. The following types of software are most likely to contain security vulnerability and should therefore be more frequently checked for patch currency (i.e. weekly):
Operating Systems Server Software - Web servers, Mail servers, FTP servers, Database servers, etc. Web Browsers - Internet Explorer, Netscape, Safari, Mozilla, etc. Email Clients - Outlook, Outlook Express, Eudora, Netscape, Mozilla, etc. Peer-to-Peer File Sharing software - Kazaa, Gnutella, eDonkey, etc.
10
Appendix B: Minimum Standards for Security of DuPage ETSB 9-1-1 System Networked Devices The following minimum standards are required for devices connected to the DuPage ETSB 9-1-1 System network. Software patch updates DuPage ETSB 9-1-1 networked devices must run software for which security patches are made available in a timely fashion. They also must have all currently available security patches installed. Exceptions may be made for patches that compromise the usability of critical applications.
Anti-virus software Anti-virus software must be running and up-to-date on every level of device, including clients, file servers, mail servers, and other types of DuPage ETSB 9-1-1 networked devices. Host-based firewall software Host-based firewall software must be running and configured according to the "Implementing Guidelines for the Minimum Standards for Security of DuPage ETSB 9-1-1 System Networked Devices", on every level of device, including clients, file servers, mail servers, and other types of DuPage ETSB 9-1-1 networked devices. While the use of departmental firewalls is encouraged, they do not necessarily obviate the need for host-based firewalls. Passwords DuPage ETSB 9-1-1 System must identify users and authorize access by means of passwords. When passwords are used, they must meet the Minimum Password Complexity Standards. In addition, shared-access systems must enforce these standards whenever possible and appropriate. All default passwords for access to network-accessible devices must be modified. Passwords used by system administrators for their personal access to a service or device must not be the same as those used for privileged access to any service or device. No unencrypted authentication Unencrypted device authentication mechanisms are only as secure as the network upon which they are used. Traffic across the 911 network may be surreptitiously monitored, rendering these authentication mechanisms vulnerable to compromise. Therefore, all 911 devices must use only encrypted authentication mechanisms unless otherwise authorized by the DuPage ETSB 9-1-1 System Administrator. (See "Requests for Exception" in the DuPage ETSB 9-1-1 System Policy on Minimum Standards for Networked Device Security Configurations.) In particular, historically insecure services such as Telnet, FTP, SNMP, POP, and IMAP must be replaced by their encrypted equivalents. No unauthenticated email relays DuPage ETSB 9-1-1 System devices must not provide an active SMTP service that allows unauthorized third parties to relay email messages, i.e., to process an e-mail message where neither the sender nor the recipient is a local user. Before transmitting email to a non-local address, the sender must authenticate with the SMTP service. Authenticating the machine (e.g. IP address/domain name) rather than the sender is not sufficient to meet this standard. Unless an unauthenticated relay service has been reviewed by DuPage ETSB 9-1-1 System Administrator and approved as to configuration and appropriate use, it may not operate on the 911 network.
11
No unauthenticated proxy services Although properly configured unauthenticated proxy servers may be used for valid purposes, such services commonly exist only as a result of inappropriate device configuration. Unauthenticated proxy servers may enable an attacker to execute malicious programs on the server in the context of an anonymous user account. Therefore, unless an unauthenticated proxy server has been reviewed by the DuPage ETSB 9-1-1 System Administrator and approved as to configuration and appropriate use, it is not allowed on the 911 network. Physical security Unauthorized physical access to an unattended device can result in harmful or fraudulent modification of data, fraudulent email use, or any number of other potentially dangerous situations. In light of this, where possible and appropriate, devices must be configured to "lock" and require a user to re-authenticate if left unattended for more than 30 minutes.
12
APPENDIX C: Implementing Guidelines for the Minimum Standards for Security of DuPage ETSB 9-1-1 System Network Devices
These Guidelines are provided to assist system administrators and end-users to configure their networked devices to comply with the Minimum Standards for Security of DuPage ETSB 9-1-1 System Networked Devices. These Guidelines include clarifying information about the Standards and configuration details for many situations. They do not include step-by-step instructions for every existing device or operating system, but they do provide the information necessary for the majority of Windows 2000 and XP operating systems. The absence of details in this Guide regarding any particular environment does not exempt a device from compliance with the Minimum Security Standards.
Software patch updates Updating the Windows Operating System Users of all versions of the Microsoft Windows operating system can visit Microsoft's Windows Update web site (windowsupdate.microsoft.com). That web site should automatically take you to the correct set of updates for your computer/workstation's version of the Windows operating system. (Note: You must use Internet Explorer to visit the Windows Update site.) Microsoft never sends patches by e-mail. Beware of e-mail claiming to be from Microsoft with attached Windows patches. (See How to Tell If a Microsoft Security-Related Message Is Genuine). Microsoft does provide an e-mail alert service informing subscribers when security updates are released. However, that service refers users to the standard Microsoft update procedures. Anti-Virus Software Anti-Virus Software must be a corporate class software and be running and up-to-date at all times. The Anti-virus must have the ability to be updated automatically. The Anti-Virus software must be installed and functional on all clients, file servers, mail servers, and all other types of DuPage ETSB 9-1-1 networked devices. Host-Based Firewall Software "Host-based firewall software for any particular type of device must be running and configured according to the "Implementing Guidelines for the Minimum Standards for Security of DuPage ETSB 9-1-1 System Networked Devices", on every level of device, including clients, file servers, mail servers, and other types of 911 networked devices. While the use of departmental firewalls is encouraged, they do not necessarily obviate the need for host-based firewalls."
What is a host-based firewall and what do they do?
A host-based firewall is software that runs directly on a networked device and protects that device against attack from the network by controlling incoming and/or outgoing network traffic. There are other kinds of firewalls that sit on the network between one or more hosts and the rest of the network, but their presence does not necessarily exempt protected devices from the need to run host-based firewall software. Host-based firewalls work by monitoring, passing, or blocking incoming and outgoing network packets. Rules govern what to look for and what to block or pass. Typical firewalls block based on source and destination address and port, packet type, etc. Advanced firewalls identify every application and system component, and rules to allow or block can be specific for each uniquely. A firewall product usually comes with predefined rules to defend against known attacks similar to anti-virus software, and predefined rules for each application and system component's normal activities. Rules may also just log the activity for later inspection or to send or display alarms. Some host-based firewalls can also prevent malicious software from attacking other devices on the network.
What devices need a firewall?
The Minimum Standards for Security of DuPage ETSB 9-1-1 System Networked Devices ("Minimum Standards") require that you run host-based firewall software on your device if it is currently protected by a corporate class firewall that meets or exceeds the minimum requirements of a host-based firewall. This
13
requirement includes not only servers, but workstations as well. To meet the Minimum Standards, all firewalls, either hardware or host-based, must meet a minimum:
Be running at all times Block inbound traffic to ports that are not running necessary services Log inbound and outbound blocked packets Allow all inbound and outbound ICMP traffic except "mask discovery"
Passwords DuPage ETSB 9-1-1 System must identify users and authorize access by means of passwords. When passwords are used, they must meet the Minimum Password Complexity Standards. In addition, shared-access systems must enforce these standards whenever possible and appropriate. All default passwords for access to network-accessible devices must be modified. Passwords used by system administrators for their personal access to a service or device must not be the same as those used for privileged access to any service or device.
Minimum Password Complexity Standards:
All passwords employed to authorize access to 911 systems or services must meet the following standards: The password MUST:
Contain eight characters or more; Contain characters from at least two of the following three character classes:
o Alphabetic (e.g.: a-z, A-Z) o Numeric (i.e. 0-9) o Punctuation and other characters (e.g.: !@#$%^&*()_+|~-=\`{}[]:";'<>?,./)
The password MUST NOT be:
A derivative of the username. A word found in a dictionary (English or foreign). Names of family, pets, friends, or co-workers. Computer/workstation terms and names, commands, sites, companies, hardware, or software. Birthdays or other personal information such as addresses or phone numbers. A set of characters in alphabetic or numeric order (e.g. abcdef), in a row on a keyboard (e.g.
qwerty), or in a simple pattern (e.g. 123123). Any of the above spelled backwards. Any of the above preceded or followed by a digit (e.g., qwerty1, 1qwerty).
Why do I need a strong password? Passwords are used for various purposes. Some of the more common uses include: local accounts, web accounts, and email accounts. A weak (or absent) password is one of the most common ways for an attacker to compromise your account; therefore, you should be aware of how to select strong passwords. The standard requires that devices must be configured to enforce the minimum password complexity requirements "whenever possible and appropriate". What type of situations might be exceptions? It may be inappropriate in situations where the device is single-user (home machines or laptops). While you MUST use a password that meets the complexity requirements, it is not necessary to configure the device to enforce the requirements on these single-user devices.
14
What are some other password guidelines?
Passwords should never be written down or stored on-line. In general, a password should be as long as possible while still being easy-to-remember. One
way to do this is create a password based on an easy-to-remember phrase. For example, the phrase might be: "This May Be One Way To Remember" and the password could be: "TmB1w2R!" or "Tmb1W>r~" or some other variation. NOTE: Do not use either of these examples as passwords!
You should change your passwords on a regular basis, at least every six months. No Unencrypted Authentication Unencrypted device authentication mechanisms are only as secure as the network upon which they are used. Traffic across the 911 network may be surreptitiously monitored, rendering these authentication mechanisms vulnerable to compromise. Therefore, all 911 devices must use only encrypted authentication mechanisms unless otherwise authorized by the DuPage ETSB 9-1-1 System Administrator. What is encrypted authentication and why should I use it? Many Internet services such as email, calendaring, and file sharing require some kind of authentication before you can use the service. That is some way for you to prove that you are who you say you are. That's typically done with a simple user ID and password. There are, unfortunately, several pitfalls in implementing this over a network. One of the biggest problems is that the Internet is designed in such a way that makes it fairly easy for a hacker to "listen in" on other peoples' communications. So, for example, every time you (or your email client) authenticate to an email server your user name and password is sent over the network to the server. That means that anyone listening in would see your user name and password. They would then have full access to your email account and could abuse it in a myriad of ways including sending out spam, viruses, or worse in your name. To avoid this, you need to make sure that your user name and password are always encrypted before being sent over the network to the server. How you do this depends on the type of service you're using and generally requires the provider of that service to configure the server in such a way that it can accept encrypted connections. No Unauthenticated email relays In addition to causing problematic bandwidth usage and inappropriate email appearing to come other unauthorized activities, in a manner similar to "virus" attacks. No Unauthenticated proxy services Although properly configured unauthenticated proxy servers may be used for valid purposes, such services commonly exist only as a result of inappropriate device configuration. Unauthenticated proxy servers may enable an attacker to execute malicious programs on the server in the context of an anonymous user account. Therefore, unless an unauthenticated proxy server has been reviewed by the DuPage ETSB 9-1-1 System Administrator and approved as to configuration and appropriate use, it is not allowed on the 911 network. Physical Security Unauthorized physical access to an unattended device can result in harmful or fraudulent modification of data, fraudulent email use, or any number of other potentially dangerous situations. In light of this, where possible and appropriate, devices must be configured to "lock" and require a user to re-authenticate if left unattended for more than 30 minutes.
15
What is physical security with respect to networked devices, and why is it important? Physical security prevents attackers from accessing a device physically rather than through the network. It is even more important than network security, but is often overlooked by users and administrators. Regardless of the level of protection that a device has from network-borne attacks, physical access to the device by a knowledgeable attacker will almost always result in a complete compromise. What do the Minimum Standards require? The Minimum Standards for Security of DuPage ETSB 9-1-1 System Networked Devices require that, where possible and appropriate, devices must be configured to "lock" and require a user to re-authenticate if left unattended for more than 30 minutes. What does "where possible and appropriate" mean? Only some devices are capable of "locking" after a set amount of time and requiring a user to re-authenticate. On devices where it is possible, it is sometimes inappropriate or unnecessary. For example:
CAD terminals If the activation of the "locking" mechanism interferes with essential software in a way for which it
was not designed (e.g. a password-protected screen saver that crashes critical lab equipment monitoring software and disrupts research)
Note: "where possible and appropriate" does not mean "where you feel like it", and annoyance at having to type a password more frequently does not constitute a valid reason to deem it inappropriate to do so. Why 30 minutes? It's long enough to prevent users from having to type their password in so often that it becomes a major annoyance or that passers-by are given too many opportunities to see the user typing it in. On the other hand, it's short enough to give attackers a reasonably small window under which they could access and compromise the device. There may be situations under which a shorter time-frame may be appropriate. How do I configure "locking"? Instructions for configuring "locking" on various devices are below: Windows XP and 2000 Windows XP and 2000 machines can be manually locked by pressing the "Ctrl+Alt+Del" key combination and then pressing "K" or clicking "Lock Computer/workstation". To set up the screen saver to automatically lock your computer/workstation:
1. Right-click the desktop, then select "Properties." 2. In the "Display Properties" window, select the "Screen Saver" tab. 3. In the drop-down window, select a screen saver if you do not have one already. 4. In the "Wait:" field, enter 30. 5. Check the "On resume, password protect" (Windows XP) or "Password protected" (Windows
2000) box then click "OK".
16
APPENDIX D: Utilization of Public Safety Applications on the DuPage ETSB 9-1-1 System Network
What public safety applications does the ETSB provide and manage on the DuPage ETSB 9-1-1 System Network?
The DuPage ETSB provides and manages several public safety applications for use with E9-1-1 dispatch services. These applications are listed below.
Motorola Printrak CAD o CAD is used by E9-1-1 dispatchers to record E9-1-1 incidents and dispatch public safety
resources. Motorola Premier MDC
o PMDC is used by public safety resources to communicate remote from the field. Motorola Automatic Vehicle Locator
o AVL provides a GIS display of public safety vehicle locations. Motorola NetRMS
o NetRMS is used to create public safety case reports and document records for public safety agencies.
What can I use these applications for? The DuPage ETSB 9-1-1 public safety applications may only be used for public safety purposes. Accessing any DuPage ETSB 9-1-1 public safety application for personal use is strictly prohibited. Who can use the DuPage ETSB 9-1-1 Public Safety Applications? Authorized users will be granted user accounts by the DuPage ETSB Systems Administrator. Each user account may only be used by the user it was created for. Sharing user accounts or accessing a DuPage ETSB 9-1-1 public safety application with another individuals user account is strictly prohibited.
What data can I access within a DuPage ETSB 9-1-1 Public Safety Application?
Users are restricted to data granted by their user account. Accessing or attempting to access data outside of the configured security privileges or data owned by a different DuPage ETSB agency is strictly prohibited.
17
APPENDIX E: Utilization of DuPage ETSB 9-1-1 Network Equipment
What equipment does the DuPage ETSB provide for use with the DuPage ETSB 9-1-1 Network Systems?
The DuPage ETSB provides equipment to facilitate the use of the DuPage ETSB 9-1-1 public safety applications and connectivity to the DuPage ETSB 9-1-1 communications networks.
The DuPage ETSB provides CAD workstations to PSAP locations for use with the Motorola Printrak CAD system. Policies for the proper use of these workstations can be found in the CAD Workstation Acceptable Use Policy.
The DuPage ETSB provides network routers and switches to connect public safety agencies to the DuPage ETSB 9-1-1 communications networks. These network devices are owned and managed by the DuPage ETSB and any modifications or unauthorized connections are strictly prohibited.
What do I do if DuPage ETSB owned equipment at my agency suffers a hardware or software failure?
Any DuPage ETSB equipment failures should be reported immediately to the DuPage County ETSB through the appropriate support request systems. The DuPage County ETSB System Administrator will coordinate any necessary repairs or replacements.
18
Information Technology and Network Security Policy Policy No: ETS 12 001 – Appendix F
User Form
Agency:
Address:
Chief/Department Head:
Telephone:
Email address:
System Administrator:
Telephone:
Celllular Phone:
Email address:
With the submission of this form, I confirm that the users of the above listed agency have reviewed and understand the DuPage ETSB Information Technology and Network Security Policy, Policy No: ETS 09 007, [the “Policy”]. The users of the agency further understand that, for security purposes, under the guidelines of this policy that an agency computer/workstation may be blocked from the DuPage ETSB 9-1-1 System Network if a violation of the policy is initiated. This form further certifies that the computer/workstations connection to the DuPage ETSB 9-1-1 System are in compliance and/or that this agencies is working with DuPage ETSB technical staff to gain compliance.
Authority: Date:
_________________________________ Chief/ Department Head
This agency is also a PSAP: [ ] yes [ ] no
19
Information Technology and Network Security Policy Policy No: ETS 12 001 – Appendix G
Network Systems Access Request Form
Agency:
System Name:
System Owner:
Destination Network IP Addresses:
Source Network IP Addresses:
Network Ports / Protocols:
Please give a brief description of what this system will be used for.
Date: Authority: _________________________________ Requestor
20
ATTACHMENT H
Memorandum of Understanding Information Technology and Network Security Access
By and Between The Emergency Telephone System Board of DuPage County (“DuPage ETSB”)
And ___________________________ (“Agency”)
This is an agreement between the DuPage ETSB, an Emergency Telephone System Board created pursuant to 50 ILCS 750/ et. seq. and the Agency governing the use of the DuPage ETSB network.
I. Purpose and Scope
The purpose of this agreement between the parties is to formalize a usage agreement for access to the DuPage Emergency Telephone System (ETS) network in accordance with DuPage ETSB policy ETS-12-001 (“Policy”), attached and incorporated as Attachment A, and made a part of this Agreement as if fully set forth herein. .
II. Background
The DuPage ETSB 9-1-1 communications networks were implemented to provide
Emergency 9-1-1 dispatch services through public safety applications. To provide a secure and accessible communications network the DuPage ETSB shall restrict network connectivity and only permit access to approved systems. These restrictions shall be implemented through the use of network firewalls and access control lists. All DuPage ETSB 9-1-1 dispatch-related public safety applications listed in section 11.1 and Appendix D of DuPage ETSB policy ETS-12-001 are considered approved.
III. Responsibilities of the Agency
The Agency wishes to have access and to connect to the DuPage ETSB network for an
application that is not listed in DuPage ETSB policy ETS-12-001. Through the execution of this document, the Agency attests and affirms that:
1. They are or will be compliance with DuPage ETSB policy ETS-12-001; 2. They have completed and submitted the appropriate request documents contained in
ETS-12-001 and are attached hereto as part of this Memorandum of Understanding; 3. They agree to abide by the conditions set forth in DuPage policy ETS-12-001. To
the extent that the Agency’s current technology does not meet the policy requirements, the Agency agrees to meet the requirements upon replacement of equipment and/or within twelve (12) months of the execution of this agreement. The Agency understands that failure to comply will result in termination of the interface/connection to the DuPage ETSB network.
4. They will notify DuPage ETSB in writing within 30 days of their intent to termination this Memorandum of Understanding.
5. The Agency agrees that it will not allow access to the DuPage ETSB network to any other party through the Agency connection.
21
IV. Responsibilities of DuPage ETSB
DuPage ETSB agrees to support, maintain and make available access to the
DuPage ETSB network to the Agency until or unless by mutual agreement of the Agency and DuPage ETSB the Agency opts to discontinue its connection.
DuPage ETSB will provide the Agency access to the DuPage ETSB network.
Access shall be provided at no cost to its members whose surcharge is remitted and retained by DuPage ETSB. Costs to members who surcharge is remitted to another entity or non-members shall be determined through negotiation and separate contractual agreement.
All costs associated with the connection/interface to the DuPage ETSB network is
the sole responsibility of the Agency.
With respect to Section III, Item 3, the DuPage ETSB agrees to provide the Agency with 30 days written notice. prior to the ETSB’s termination of an interface/connection, Notwithstanding the forgoing, the DuPage ETSB may terminate the Agency’s software application if the ETSB determines that such application poses an immediate threat to the security of the DuPage ETSB network. The DuPage ETSB shall provide notice to the Agency’s submitted single point of contact as previously communicated to the ETSB if any such termination takes place.
V. Further Agreements of the Parties
The parties agree that the current interface shall remain intact and that any costs relating to the interface shall be the burden of the Agency.
DuPage ETSB agrees to notify the Agency of any changes or upgrades to the network
or a system application which may interrupt access within 90 days. Any costs related to a change or upgrade for an interface or Agency application is the sole responsibility of the Agency. DuPage ETSB will not delay a system change or upgrade for its users of public safety 9-1-1 systems.
VI. Term, Termination, and Modification of Agreement
This Memorandum shall become effective upon its execution by both parties remain in effect
until terminated as provided herein. The Agency may terminate its participation in the agreement within thirty (30) days of its execution.
Emergency Telephone System Board of ____________________________, DuPage County The Agency By_____________________________ By __________________________ Chairman Authorized Agent Date:__________________________ Date:_________________________
E9-1-1 NETWORK 4/5/2016
BURR RIDGE
DISPATCHED AT DU COMM
600 WALL ST
GLENDALE HTS
LOMBARD
AT&T ALI DATABASE
BACKUP PSAP
DUPAGE CO
SHERIFF
BURR RIDGE
DISPATCHED AT DUCOMM
RATE CENTER END FFICE
A LINKS
CONTROL OFFICE9-1-1 TRUNKS B LINKS
DATABASE
ACCESS
SUMMIT DS0
AT&T-----------------------------6
CLECA T & T - - - - - - - - - - - - - - - - 2 4C B E Y O N D - - - - - - - - - - - 2C I M C O - - - - - - - - - - - - - - - - - 2
F O C A L - - - - - - - - - - - - - - 8F R O N T I E R - - - - - - - - - - - - 8G L O B A L C O M - - - - - - - 2L E V E L 3 - - - - - - - - - - - - 2
M C I - - - - - - - - - - - 2M c L E O D - - - - - - - - - - - - - - 4MPOWER - - - - - - - - - - - - - -2P A E T E C - - - - - - - - - - - - - - 2 X O C O M - - - - - - - - - - - - 2
LA GRANGE DS0
AT&T-----------------------------6
CLEC
A L L E G I A N C E - - - - - - - - 4A T & T - - - - - - - - - - - - - - - - 2 4F O C A L - - - - - - - - - - - - - - - 8C B E Y O N D - - - - - - - - 2F O C A L - - - - - - - - - - - - - - 8
F R O N T I E R - - - - - - - - - - - - 4G L O B A L C O M - - - - - - - 2LEVEL 3---------------------2M C I - - - - - - - - - - - - - - - - - - - 2
M c L E O D - - - - - - - - - - - - - - 4M G C - - - - - - - - - - - - - - - - - - 2P A E T E C - - - - - - - - - - - - - - 4 X O C O M - - - - - - - - - - - - - - 2
HINSDALE DS0 /OAKBROOK DS0
AT&T---------------------------11
CLECA L L E G I A N C E - - - - - - - - 2A T & T - - - - - - - - - - - - - - - 1 6C B E Y O N D - - - - - - - - 2
C I M C O - - - - - - - - - - 2F O C A L - - - - - - - - - - - - - - - 6F R O N T I E R - - - - - - - - - - - - 8G L O B A L C O M - - - - - - - 2
I N T E R M E D I A - - - - - - - - - 2L E V E L 3 - - - - - - - - - - - - - 4M C I - - - - - - - - - - - - - - - - - - - 6M c L E O D - - - - - - - - - - - - 4M G C - - - - - - - - - - - - - - - - - - 2
P A E T E C - - - - - - - - - - - - - - - 2 TDS METROCOM----------2X O C O M - - - - - - - - - - - - - - 4
(7) Wireline Trunks Zone1 / 1A 7EMNC849042 7EMNC849043
7EMNC849063 7EMNC849064 TG 6297UGXR103229 Make Busy7EMNC849066 7EMNC8490677EMNC849068
TG 6317UGXR177183
3FDDZ695061-Southfield7FDDZ695060-Northbrook
PROPOSED CHANGES 2016