Loading...
Police Technology Transfer Prog. Grant App i5U~~E ~ck-~ MEMORANDUM May 8, 2006 TO: The Honorable Mayor and City Council Members ,. FROM: Michael C. Van Milligen, City Manager SUBJECT: Grant Opportunity - Technology Transfer Program Chief of Police Kim Wadding recommends City Council approval of a 2006 Technology Transfer Program grant application submitted April 28, 2006. This grant application requests the purchase of a pre-designated Computer Forensics Tool Kit consisting of computer hardware and software to capture suspect computer hard drives and files for evidence related to illegal drug use and sales, financial records and other computer related crimes. The Technology Transfer program differs from a typical grant program by providing specific equipment instead of actual dollars. The program offers a variety of equipment to enhance drug enforcement detection and apprehension. Once an application is approved, the agency agrees to receive the equipment and to be properly trained in its use. I concur with the recommendation and respectfully request Mayor and City Council approval. (11J L~j21v^- Michael C. Van Milligen MCVM/jh Attachment cc: Barry Lindahl, Corporation Counsel Cindy Steinhauser, Assistant City Manager Kim B. Wadding, Chief of Police c DU~~E ~<k~ MEMORANDUM Date: May 8, 2006 To: Michael C. Van Milligen City Manager From: Kim B. Wadding A,,, Police Chief ~ Re: Grant Opportunity - Technology Transfer Program INTRODUCTION The purpose of this memorandum is to seek approval of a 2006 Technology Transfer Program grant application submitted April 28, 2006 having a due date of April 30, 2006. The grant application requests the purchase of a pre-designated Computer Forensics Tool Kit (FTK) consisting of computer hardware and software to capture suspect computer hard drives and files for evidence related to illegal drug use and sales, financial records and other computer related crimes. BACKGROUND The Technology Transfer Program is a federally funded program under the Office of Drug Control Policy and provides counter drug technologies to state and local law enforcement agencies. During the 2006 budget process, a budget decision package was approved for the development of an in-house Forensic Computer Analyst to expand our investigative capabilities in the detection of computer and internet related crimes. DISCUSSION The police department, as part of our Criminal Investigations Division, is in the initial stages in the development of the forensic computer analyst program. Currently, a Criminal Investigations Corporal is undergoing certification instruction regarding forensic computer analysis. Additionally, we have purchased a Forensic Recovery Evidence Device (F.R.E.D.) for use in the analysis of computer hard drives and files. While attending a recent training and discussing the 2006 Technology Transfer Program as a potential funding opportunity, it was learned the 2006 grant applications was due April 30,2006. The Technology Transfer Program allows any eligible law enforcement agency to submit one (1) application per year. Due to the submittal date, the application was completed and submitted the same day, Friday, April 28, 2006. The Forensics Tool Kit , provides hardware and software to run multiple software applications coupled with advance training in Windows Forensics, Internet Forensics and applied decryption. The Technology Transfer program differs from a typical grant program by providing specific equipment instead of actual dollars. The program offers a variety of equipment to enhance drug enforcement detection and apprehension. Once an application is approved, the agency agrees to receive the equipment and to be properly trained in its use. With the exception of officer wages and benefits, the associated training costs, including travel and lodging, are provided through awarded funds. RECOMMENDATION As we launch this new investigative area of forensic computer analysis, having the addition of the Forensics Tool Kit expands our efforts to investigate, evaluate, and document evidence seized computers and extends our investigative abilities. I recommend approving the grant application submitted April 28, 2006 and, if approved, accept the grant award of the Forensics Tool Kit. ACTION REQUESTED To approve the Technology Transfer Program grant application and, if awarded, to accept the grant award for the Forensics Tool Kit and associated training. Office of National Drug Control Policy Counter Drug Technology Assessment Center Agency: Dubuque Police Department Application Year: 2006 Technology: Forensic Tool Kit Submission Period: 1/1/2006 - 4/30/2006 Your Application for Forensic Tool Kit was submitted on 4/28/2006 1 :44:24 PM. 1. Population Served: 50,000 to 99,999 2. Total number of fulltime, sworn law enforcement personnel: 26 to 199 3. Check the separate units, divisions, groups, and/or teams that are within your organization. (As separate, there should be assigned personnel and work space areas.) Information Technology (IT), Narcotics, Technical 4. Rank, in order, your community's top three (3) drug crime issues with #1 as the most prevalent drug of abuse. Amphetamines I Methamphetamines, Marijuana, Cocaine I Crack 5. Rank, in order, your community's top three (3) drug crime issues with #1 as the most prevalent problem. Distribution, Manufacturing / Production, Use 6. Is your organization within 75 miles of an international border? No 7. Is your organization within 75 miles of a major metropolitan area, which has a population of 500,000 people? No 8. If your organization receives equipment under the program, does your agency agree to complete program and equipment evaluations? Yes 9. Will the equipment be shared with other law enforcement agencies? Yes 10. Does your agency agree to log equipment into an inventory control system and to provide the unique tracking number on subsequent follow-up evaluations? Yes 11. Is your agency willing to share successes, experiences, and unique or innovative applications of the equipment in publications? Yes 1 12. How did you learn about the Technology Transfer Program? Other 13. For the technology you selected, describe your agency's need to disrupt the illicit drug market in your community. The Dubuque Police Department seizes a high number of camera cell phones and has the opportunity to seize computers during drug investigations. We know from experience and training that there is an enormous amount of evidence and intelligence to be gathered from forensically analyzing cell phones, PDA's and computers from suspected drug dealers and users. We do not have a way at this time to forensically capture the evidence on cell phones and other digital media. We know the evidence is there, we just can not extract it without the proper tools and training. If we could access this information it would enhance the prosecution of not only state criminal cases but also federal. The intelligence gathering would be beneficial in targeting suspects, identifying areas, and educating law enforcement and the general public on drug awareness. 14. How will the selected technology provide a new capability or improve existing capabilities? Currently, the Dubuque Police Department has an investigator who has completed NW3C's Basic Data Recovery and Acquisition training and has been certified as a Certified Electronic Evidence Collection Specialist (IACIS). The investigator is currently attending the 2006 Computer Forensics Conference and will begin the certification process for becoming a Certified Forensic Computer Examiner through IACIS. The Dubuque Police Department is committed to establishing a Forensic Computer Lab staffed by a certified examiner. As part of the 2006 budget process, the City of Dubuque approved $17,000 for the development of a Forensics Computer Lab. The approval of this grant application allows the department additional equipment and needed training for a comprehensive program. The grant funding allows the purchase of the Access Data bundle valued at $11,785. Our priority is to obtain the laptop and Access Data Examiner Certification. 15. How will the selected technology lead to an improvement in officer safety? Having the ability to forensically recover digital evidence we are confident our prosecutable criminal cases will rise along with our intelligence data base. Building strong criminal cases through forensic means ensures more criminal convictions - strong evidence produces strong convictions. Removing drug violators who are prone to use violence as a means to prevent apprehension ensures a safer environment for the community as well as to officer safety. 16. Does your agency have an established policy on equipment sharing with other law enforcement agencies and/or law enforcement personnel? Outline the policy details. The Dubuque Police Department is a partner with the Dubuque County Drug Task Force. The Dubuque County Drug Task Force consists of three members of the Dubuque County Sheriff's Office, two members of the Dubuque Police Department, and a coordinator and prosecutor from the Dubuque County Attorney's Office. Additionally, the Dubuque County Drug Task Force shares office space with a Dubuque Police Officer assigned to the Iowa State 18-County Drug Task Force led by the Iowa 2 I Department of Narcotics Enforcement (ONE). Located in the same building separate from the Dubuque Police Department and the Dubuque County Sheriff's Office, the drug task forces work directly and daily with agents from the Iowa Department of Narcotics Enforcement. All equipment is shared between these three agencies and equipment owned for task force operations is overseen by the Dubuque County Control Board led by the Dubuque County Attorney, Dubuque County Sheriff, and the Dubuque Police Chief. 17. Describe how your agency currently conducts forensic investigations of electronic data. Currently, our forensic investigations are conducted in cooperation with two outside law enforcement agencies, Scott County Sheriff's Office and the Cedar Rapids Police Department. With the number of these investigations increasing daily, the need for a dedicated forensic investigator in the Dubuque Police Department has become a priority. As mentioned earlier, the Dubuque Police Department has established one investigator to assume the role of a forensic investigator coupled with an initial financial commitment of $17,000. 18. Does your agency have dedicated technical personnel to support this system? List number of personnel with experience and qualifications. The City of Dubuque employs an Information Technology Department. The Information Technology Department employs six full time and one part time employee. The department consists of a manager, a senior network administrator, two lead application/network analysts, an information technology specialist, a user technology specialist, and a part time computer intern. Of the employees, one of the lead applications/network analyst and the part time computer intern is dedicated to the Dubuque Law Enforcement Center. Additionally, the Dubuque Police Department has one employee dedicated as a computer specialist. All of the information Technology employees mentioned have advanced training in computer software applications, network installation and maintenance and computer hardware. 19. Ancillary costs to support this system may be significant. How will your agency commit resources to sustain operations of the system? Each year during the budget process, the police department projects associated costs for various programs. During FY2006, the City of Dubuque dedicated $17,000 for the forensic investigation process. As we evaluate our annual financial needs, we include them as part of our budgetary request. Our research indicates our ongoing program costs for this project is estimated between $3,000 to $5,000 annually. Additionally, through the efforts of the Dubuque County Drug Task Force we have seizure funds available to offset funding needs if they enhance these law enforcement efforts. 3