📋
Extracted from Consolidated Report
This investigation was originally published as part of a larger consolidated report containing multiple investigations. View the consolidated PDF for the complete document.
Los Angeles County Grand Jury
• 2010-2011
Civil Grand Jury County of LOS Angeles
⚠️ Translation Notice: This content has been automatically translated. The original English text is the official version. Translation may contain errors.
⚠️ Este contenido ha sido traducido automáticamente. El texto original en inglés es la versión oficial. La traducción puede contener errores.
Findings 9 findings
F1
Regional Joint Task Force Model: a. RCFL, ECTF, SCHTTP and ICAC are each excellent examples. b. Provide for easy collaboration, flexibility of staff allocation, leveraging of multi- agency funding and resources and mentoring c. Membership may be formalized through a Memorandum of Understanding (MOU) or an informal agreement. d. Improved service on a regional scale e. Maximize Federal, State and County resources
F2
Localized Joint Task Force Model: a. A well structured example of this model included: i. Three (3) neighboring cities with the FL located in the Police Department of one (1) of the cities ii. Four (4) sworn officers from the three (3) cities iii. Two (2) sworn officers from two (2) RTFs b. Membership may be formalized through an MOU or may be informal. c. Supported by the citing city’s Information Technology (IT) Department d. This FL is a member of SCHTTF and TF e. Provides for easy collaboration, flexibility of staff allocation, leveraging of multi agency funding and resources and mentoring f. Improved service to participating cities constituents
F3
Loosely aligned group of single jurisdiction FL: a. The FLs are located in the Police Department of each of the cities. b. The FL is a one-officer or one- tech shop. c. Association is loosely structured and based on a mutual aid model.
F4
Page 54
Single jurisdiction FL with membership in Regional Joint Task Force(s). a. The FL is located in the Police Department of that city. b. The FL has one (1) to five (5) trained staff, generally a combination of sworn and tech. c. Is available to other law enforcement agencies on a mutual aid model FL Skills and Equipment Considerations
F5
Page 55
Highly motivated staff
F6
Page 55
Highly qualified staff
F7
Improved service to constituents as a goal 12 Graham, ibid. 40 2010-2011 LOS ANGELES COUNTY CIVIL GRAND JURY
F8
Page 56
Procurement guidelines that recognize and take into account the rapidity with which technology is changing
F9
Page 56
Systems to monitor best practices, compliance and changing technology and to reward performance Training In employing the RPM approach in any field, including high tech forensics, training is a core ingredient. The purpose of training must be to create officers who are prepared, equipped, and ready to perform and respond to any situation that presents itself. Anyone can train personnel after something goes bad13. The real challenge is delivering training proactively to prevent problems prior to occurrence. If trained personnel are not available to utilize a FL, then it is largely an expensive box with equipment and software that is lying fallow and becoming obsolete. Whether it is a State of the art new regional FL or a small FL in a converted area of an existing facility, it requires well qualified and well trained personnel. High tech is a fast evolving field; continuous improvement is the name of the game. Today’s new “thing” may be out of date tomorrow. Today, most hard drives are magnetic, but the trend is towards switching ceramic hard drives. Storage is moving to the “cloud.” And so on. The cyber intruders, terrorists and crooks are continuously improving their mode of attack, trying and developing new tactics, software and hardware. Our forensic examiners and cyber investigators have to be continuously improving as well. Training is critical and MUST be ongoing as the technology is always evolving.
Recommendations 5
-
R1Page 51The District Attorney, being the nexus of all law enforcement in the County as prosecutor of felonies, should take the lead role and become the central repository for coordination of high tech information by doing the following: a. Establish and keep up to date a list of all training available for high tech forensics examination, cyber investigation and cyber security, including local, State and Federally sponsored training, as well as private training opportunities. It is likely the DA’s high tech Forensic Division is already doing this internally and could, with little effort and cost, make this information available to the Task Forces, the LAC Sheriff and the municipal police departments. b. Provide outreach to all police departments and the sheriff on a regular basis regarding the value of and training in high tech forensics in crime fighting in Los Angeles County. i. This could be done through seminars for groups of law enforcement officers organized geographically by Supervisorial District or area; e.g., South Bay, San Gabriel Valley, West LA, San Fernando Valley, etc. ii. Individual department “roll-call” training should also be part of this program. c. Keep a log of the use of digital evidence in the prosecution of cases, both high tech crimes and “old school” crimes. The log should indicate the nature of the digital evidence (cell phone photo, location info, contact info, computer file, GPS, etc.); its importance to the case (useful, important, critical); and the role it played (allowed case to settle, critical to achieving a guilty verdict, sentence enhancements, freed an innocent person, enabled the return of stolen property to rightful owner, etc.). The DA should encourage municipal departments to do this for misdemeanors as well. This will build a body of evidence to help inform decision makers in the budgeting process and persuade law enforcement agencies with no in-house capability to see a need. d. Establish a program for all deputy DAs to acquire the basic knowledge and skills necessary to develop their cases using digital evidence in a manner a judge and jury can understand e. Develop and conduct seminars to educate the judges in digital evidence use in the criminal justice process
-
R2Page 51Arcadia PD, Beverly Hills PD, City of Los Angeles PD, Culver City PD, Downey PD, Glendale PD, LAC District Attorney, LAC Sheriff, Santa Monica PD, Monrovia PD, Redondo Beach PD, Torrance PD, Whittier PD. a. Establish a “High Tech Forensics Bureau.” This will facilitate: i. Promotions and career opportunities for those who are trained and skilled in this area without having to leave the discipline ii. Succession planning and transfer of high tech expertise, preserving the investment made in creating the expertise. b. Update regular law enforcement recruit and detective training to include orientation, procedures, protocols and other training with respect to digital evidence c. Include training in digital evidence collection, analysis and use in “roll call” training. d. Take steps to acquire the POST certification for High Tech training courses for forensic examiners and cyber investigators to allow for reimbursement of the costs.
-
R3Page 52LAC Chief Information Office and Internal Services Department should conduct internal reviews concerning cyber security and infrastructure protection from Cyber attacks and terrorism: a. LAC must have protocols, policies and procedures facilitating timely, efficient rapid response by the most able cyber security resources available and ancillary emergency response by other agencies, if warranted, in the event of a cyber intrusion, fire wall breach or other cyber attack. b. These should include coordination with key third party vendors. Many basic services within the LAC are provided by third party vendors. The Metropolitan Water District and California Edison are two (2) examples.
-
R4Page 52The LAC Board of Supervisors should task their lobbyist in Sacramento and Washington with looking at opportunities to redirect fees and taxes on land line phones, cell phones or internet access services to provide funding allocated to the support high tech forensics, cyber security and forensic examination programs
-
R5Page 53LAC and the City of Los Angeles establish a "High Tech Endowed Badge Program” to support the training and equipping of FE and CI throughout local law enforcement. Initially, establishment of eight (8) EBs could be evaluated. Setting up five (5) EBs by the LAC Board of Supervisors District one for each Supervisorial District; and setting up three (3) EBs by the City of Los Angeles one for each of the Proprietary Departments (Department Of Water and Power, the Port of Los Angeles, Los Angeles International Airport (LAWA)) for a total of eight (8) EBs. Funding Training through an Endowed Badge – A Concept Borrowing a concept from the University system, the CGJ believes there is a future in establishing, within law enforcement, a High Tech Forensics Examination – Cyber Investigations – Cyber Security Endowed Badges Program. If possible, these could be “named” endowed badges (EB). It is in the interest of business to have a safe City/County in which to do business. There may be interest from many sectors to participate in this EB public private partnership. 44 2010-2011 LOS ANGELES COUNTY CIVIL GRAND JURY