Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
- OCCO must have a written OHLEG policy in place and be able to provide a copy during the visit.
- The OCCO policy library under SOPs → OHLEG is the office source of truth for supplemental OHLEG/CJI procedures.
- Keep a printable copy of the current OCCO OHLEG policy set available for the inspector.
- Written policy must require immediate contact with OHLEG Support when the agency is subject to a computer or cyber attack, including phishing, malware, credential compromise, or similar security events.
- Do not wait for the internal incident form to be completed before making the required notification.
- OHLEG Quality Assurance / Support: 866-406-4534 · OHLEGQA@ohioAGO.gov
- Agency policy must expressly state whether personally owned devices may be used to access OHLEG.
- OCCO permits personal-device access only as a documented operational exception when timely official access is necessary and a County-issued device or reasonable authorized alternative is not available or practical.
- Every personal-device OHLEG access must be entered in the OCCO Personal Device Access Log.
- CJI/CHRI shall not be intentionally retained on a personally owned device.
- Verify the actual access scope of Justin Wallace, Cole Beck, Chelsey Webb, and any other person who can directly or indirectly access CJI.
- Have the applicable BCI and FBI fingerprint background-check letters available for inspection.
- Do not rely on a dashboard N/A or green indicator if the underlying inspection document is missing.
- Background checks are treated as completion requirements, not annual renewal items, unless OHLEG/BCI directs otherwise.
- Be prepared to demonstrate physical controls that limit access to CJI/OHLEG work areas and devices to approved personnel.
- County-issued devices shall remain under authorized control and be locked when not actively used.
- Visitors, members of the public, and unauthorized personnel shall not be allowed to view CJI/CHRI.
- Displayed information and unlocked devices shall not be left unattended.
- If OCCO stores CHRI, the storage location must have appropriate administrative, technical, and physical safeguards to protect confidentiality.
- Official case-related CJI/CHRI that must be retained belongs in the authorized OCCO case record, including Coroner Files and the corresponding County Google Drive case file, as applicable to the investigation.
- Temporary local copies on a County-issued device are deleted after successful upload to the official case file is confirmed.
- No personal cloud storage, personal email, personal notes, consumer file-sharing services, or intentional personal-device retention.
- During the visit, be prepared to explain exactly where retained CJI/CHRI is stored and who is authorized to access it.
- The agency OHLEG roster must have been validated within the preceding 90 days.
- The Chief Investigator is responsible for OCCO's office-level roster validation.
- Keep the most recent validation date readily available for the inspector.
- Security Awareness Training is required annually for personnel with direct or indirect access to OHLEG information.
- Acceptable evidence identified by the evaluation includes the OHLEG Security Awareness Training Certificate or CJIS Security Certificate.
- Certificates should be available for inspection, not merely recorded as complete in the dashboard.
- Every OHLEG account holder must sign the User Agreement before gaining access.
- The Agency Agreement must be signed by the Agency CEO.
- Signed agreements must be present and available for inspection.
- The supplied OHLEG Agency/User Agreement acknowledges the OHLEG Rules & Regulations, required security training, monitoring/auditing, authorized criminal-justice use, and restrictions on dissemination.
- If CHRI obtained through OHLEG is ever disseminated as permitted by OHLEG rules, a dissemination log must be maintained.
- If OCCO does not disseminate CCH/CHRI from OHLEG, that should be accurately stated on the pre-visit evaluation rather than creating fictional log activity.
- If dissemination occurs, use the CHRI Dissemination Log template maintained below and document each permitted dissemination.
- Maintain a destruction/disposal log for electronic devices and media used to access OHLEG, including computers, tablets, hard drives, or other applicable media.
- The log may be maintained by County IT if that department controls device disposition, but a copy must be available for the compliance visit.
- Use the Electronic Media Disposal Log template maintained below when OCCO is responsible for the record.
- Physical media containing protected information must be destroyed by an approved method such as shredding or incineration.
- OCCO does not authorize routine printing of OHLEG CJI/CHRI.
- If protected paper is inadvertently created, it must be secured and destroyed using the approved OCCO/County destruction process.
- When bulk physical-media destruction is performed by a third-party contractor, maintain a Bulk Physical Media Destruction Log.
- Applicable CHRI Dissemination, Electronic Media Disposal, and Bulk Media Disposal logs must be retained for a minimum of 8 years.
- This specific OHLEG log-retention requirement applies even though general County records continue to follow the applicable approved County retention schedule.
- Do not destroy a required log that is subject to an active hold, investigation, records request, prosecutor instruction, court order, or other preservation requirement.
- Completed current OHLEG Quality Assurance Pre-Visit Evaluation
- Current OCCO OHLEG / CJI policy set
- Personal Device OHLEG Access policy and access-log process
- OHLEG / CJI Security Incident Reporting policy and incident-report process
- BCI fingerprint background-check letters for applicable personnel
- FBI fingerprint background-check letters for applicable personnel
- Current annual Security Awareness / CJIS Security training certificates
- Signed OHLEG User Agreements for every account holder
- Signed OHLEG Agency Agreement by the Agency CEO
- Evidence of the most recent 90-day OHLEG roster validation
- CHRI Dissemination Log, if applicable, or an accurate “does not disseminate” response
- Electronic Media Disposal Log or County IT equivalent
- Bulk Physical Media Destruction Log, if applicable
- Evidence that applicable OHLEG logs are retained for at least 8 years
- Ability to demonstrate secure facility/device controls and explain the authorized CHRI storage workflow
For a computer/cyber attack or suspected OHLEG security event, contact OHLEG Support immediately. This OCCO report documents the incident but does not replace any immediate notification required to OHLEG/OAC, BCI, a supervisor, CJIS, or law enforcement.
OHLEG Quality Assurance / Support: 866-406-4534 · OHLEGQA@ohioAGO.gov
Purpose
This SOP establishes Ottawa County Coroner's Office requirements for accessing, handling, storing, disseminating, and disposing of Criminal Justice Information and Criminal History Record Information obtained through OHLEG or another authorized criminal justice source.
OCCO uses OHLEG primarily for legitimate death-investigation purposes, including identification and verification of individuals associated with an investigation.
Access Scope
- Full OHLEG Users may directly access OHLEG within the limits of their authorized account and official duties.
- Limited CJI/CHRI Access personnel may handle CJI/CHRI associated with OCCO cases but shall not directly access OHLEG unless separately authorized.
- Excluded personnel are outside OCCO's current CJI/CHRI compliance scope and shall not access or handle CJI/CHRI.
- Access shall never be used for personal curiosity, unofficial background checks, non-case-related purposes, or the benefit of another person.
Authorized Purpose
OCCO's routine use of OHLEG is limited to legitimate death-investigation functions, primarily confirming or assisting with identification and verifying identifying information relevant to a death investigation. OCCO does not routinely use OHLEG to conduct criminal investigations.
Dissemination
CJI/CHRI obtained through OHLEG shall not routinely be disseminated outside OCCO. Because OCCO's use of OHLEG is primarily for identification purposes, information obtained through OHLEG should ordinarily remain within the OCCO case record.
Any proposed external dissemination of CJI/CHRI must be reviewed and approved before release by the Ottawa County Prosecutor's Office or the elected Ottawa County Coroner and must comply with applicable OHLEG dissemination restrictions. Investigators shall not independently determine that CJI/CHRI may be released.
If CHRI obtained through OHLEG is disseminated in a manner permitted by OHLEG rules, the dissemination shall be entered in the OCCO CHRI Dissemination Log. The log shall identify the date, subject, disseminating user, record type, method of dissemination, recipient agency/ORI, and recipient.
If OCCO does not disseminate CCH/CHRI from OHLEG, the office shall accurately document that fact during compliance review rather than creating unnecessary dissemination records.
Storage
- When CJI/CHRI must be retained as part of an OCCO investigation, it may be temporarily saved to an authorized County-issued iPad.
- The information shall be placed into the authorized OCCO case record, including Coroner Files and the corresponding County Google Drive case file, as applicable to the investigation.
- After successful upload and confirmation that the record is accessible in the case file, any locally stored copy on the iPad shall be deleted.
- CJI/CHRI shall not remain unnecessarily stored in device downloads, photographs, screenshots, browser files, or other local storage.
CJI/CHRI shall not be stored on personally owned devices, personal cloud-storage accounts, personal email accounts, personal notes applications, or unauthorized messaging or file-sharing services.
Printing
Screenshots and Electronic Copies
Screenshots or electronic copies may be created only when necessary to preserve relevant information within an official OCCO case file. Any such image or file shall be created using an authorized County-issued device, uploaded promptly into the appropriate case file, and deleted from the device after successful upload.
Email, Text Messaging, and Messaging Applications
CJI/CHRI shall not be forwarded through personal email, personal text messages, consumer messaging applications, or other unauthorized communication methods. County personnel shall follow Ottawa County policies governing electronic records, confidentiality, public records, and retention.
Physical Media and Paper Records
OCCO does not authorize routine printing of CJI/CHRI. If CJI/CHRI is inadvertently printed or otherwise exists on physical media, it shall not be placed in normal trash or recycling.
Physical material containing CJI/CHRI shall be destroyed by cross-cut shredding using the County-approved shredder and then placed into the document destruction bin located in the first-floor Business Hub beside Human Resources.
Electronic Disposal
Electronic copies maintained temporarily on County-issued devices shall be deleted after successful upload into the official OCCO case file. Personnel shall confirm the official copy has been successfully stored before deleting the temporary device copy.
Personal Device Use
OHLEG should be accessed using the County-issued iPad. If operational circumstances require use of a personally owned device, the investigator shall comply with the OCCO Personal Device OHLEG Access process and complete the required Personal Device Access Log.
CJI/CHRI shall not be intentionally downloaded, saved, photographed, or otherwise retained on a personally owned device.
Security Incidents
Any suspected or confirmed unauthorized disclosure, loss, improper access, misdirected transmission, compromised credential, or other security issue involving CJI/CHRI shall be reported immediately in the following order:
- OHLEG/OAC
- OCCO Chief Investigator
- Ottawa County Prosecutor's Office
The investigator shall also complete the OCCO Security Incident Report as soon as practical. Immediate notification shall not be delayed while waiting to complete documentation.
Lost or Compromised Devices
If a County-issued or personally owned device used to access CJI/CHRI is lost, stolen, compromised, or believed to have been accessed by an unauthorized person, it shall be treated as a security incident and reported immediately under the procedure above.
Records Retention
Official OCCO records shall be retained and disposed of according to applicable Ottawa County records-retention schedules and legal requirements except where a specific OHLEG requirement establishes a longer minimum.
The CHRI Dissemination Log, Electronic Media Disposal Log, and Bulk Physical Media Destruction Log, when applicable, shall be retained for a minimum of 8 years in accordance with the OHLEG pre-visit requirements.
CJI/CHRI itself should not be retained beyond the period necessary to support the official case record unless otherwise required by law, policy, court order, litigation hold, prosecutor instruction, records request, or an approved retention schedule.
Public Records and Investigative Records
The existence of CJI/CHRI within an OCCO case file does not authorize its public release. No investigative record or investigative material shall be externally released without review by the Ottawa County Prosecutor's Office. Investigators shall not independently determine whether CJI/CHRI or related investigative material is subject to disclosure.
Personnel Responsibilities
- Protect CJI/CHRI from unauthorized access.
- Access information only for official purposes.
- Prevent unnecessary duplication.
- Properly store case-related information.
- Remove temporary device copies after upload.
- Never print CJI/CHRI.
- Immediately report security incidents.
- Follow County and OCCO retention requirements.
- Complete required security-awareness training.
Violations
Improper access, use, retention, dissemination, or disclosure of CJI/CHRI may result in suspension or removal of OHLEG access, internal administrative action, referral to OHLEG/OAC, referral to the Ottawa County Prosecutor's Office, or other action required by law or County policy.
Related OCCO Documents
Purpose
This SOP establishes physical and device safeguards for Criminal Justice Information and Criminal History Record Information accessed or handled by Ottawa County Coroner's Office personnel.
The objective is to prevent unauthorized viewing, access, loss, disclosure, or retention of CJI/CHRI while allowing investigators to perform legitimate death-investigation duties efficiently.
Authorized Devices
- The County-issued iPad is the preferred device for OHLEG access.
- Personally owned devices may be used only when operationally necessary and only in accordance with the OCCO Personal Device OHLEG Access requirements.
- Any personally owned device used to access OHLEG must be documented in the OCCO Personal Device Access Log.
- CJI/CHRI shall not be intentionally retained on a personally owned device.
Device Security
- County-issued iPads used for OHLEG or CJI/CHRI shall remain under the control of authorized OCCO personnel.
- Devices shall be locked whenever they are not actively being used.
- Passwords, passcodes, PINs, biometric credentials, and OHLEG credentials shall not be shared.
- Investigators shall not allow another person to use an active OHLEG session under their credentials.
- Devices shall not be left unattended in a location where an unauthorized person could gain access to the device or view displayed CJI/CHRI.
Viewing and Workspace Security
- CJI/CHRI shall not be left visible on an unattended screen.
- Personnel shall position devices so members of the public, family members, visitors, or other unauthorized persons cannot view CJI/CHRI.
- CJI/CHRI shall not be displayed in public-facing areas unless necessary for an official investigative purpose and protected from unauthorized viewing.
- Personnel shall use reasonable care when accessing OHLEG in vehicles, hospitals, residences, public areas, or other field environments.
Temporary Electronic Storage
- CJI/CHRI may be temporarily saved to a County-issued iPad only when necessary to preserve information for the official OCCO case file.
- The information shall be placed promptly into the authorized OCCO case record, including Coroner Files and the corresponding County Google Drive case file, as applicable to the investigation.
- The investigator shall confirm the file was successfully uploaded and is accessible within the case file.
- The temporary local copy shall then be deleted from the device, including applicable downloads, photographs, screenshots, or other local storage locations.
Printing and Physical Copies
If CJI/CHRI is inadvertently printed or otherwise exists on paper or physical media, it shall be protected from unauthorized viewing and destroyed as soon as practical using the approved OCCO destruction process.
Visitors and Unauthorized Personnel
- Visitors, members of the public, and personnel outside the authorized access scope shall not be permitted to view CJI/CHRI.
- Personnel designated as Excluded shall not access or handle CJI/CHRI.
- Personnel designated as Limited CJI/CHRI Access may handle CJI/CHRI only as necessary for assigned OCCO duties and shall not directly access OHLEG unless separately authorized.
Facility Inspection Readiness
For OHLEG compliance review, OCCO shall be prepared to demonstrate how physical access to OHLEG devices and any stored CJI/CHRI is limited to approved personnel. The inspector may ask to see the work area, device controls, visitor protections, and storage location rather than relying solely on written policy.
- Authorized devices shall not be left unlocked or unattended where unauthorized personnel can access them.
- CJI/CHRI shall not be left displayed where visitors or the public can view it.
- Any area or storage location used for retained CJI/CHRI shall be protected through appropriate administrative, technical, and physical safeguards.
Transport and Field Use
- County-issued devices containing or displaying CJI/CHRI shall remain in the investigator's possession or otherwise secured from unauthorized access.
- Devices shall not be left plainly visible in an unattended vehicle.
- CJI/CHRI shall not be copied to removable media, personal cloud storage, personal email, or consumer file-sharing services.
Lost, Stolen, or Compromised Devices
A lost, stolen, compromised, or potentially compromised device that was used to access OHLEG or CJI/CHRI shall be treated as a security incident.
Notification shall occur immediately in the following order:
- OHLEG/OAC
- OCCO Chief Investigator
- Ottawa County Prosecutor's Office
The investigator shall also complete the OCCO Security Incident Report as soon as practical. Immediate notification shall not be delayed while waiting to complete documentation.
Physical Disposal
If paper or other destroyable physical material containing CJI/CHRI is inadvertently created, it shall be destroyed by cross-cut shredding using the County-approved shredder and placed into the document destruction bin located in the first-floor Business Hub beside Human Resources.
Personnel Responsibilities
- Maintain control of authorized devices.
- Lock devices when not actively in use.
- Protect screens from unauthorized viewing.
- Never share OHLEG credentials or device passcodes.
- Use County-issued devices whenever practical.
- Upload retained information into the official case file and delete temporary local copies.
- Never print CJI/CHRI.
- Immediately report lost, stolen, or compromised devices.
Related OCCO Documents
Purpose
Establishes the limited circumstances and safeguards for accessing OHLEG from a personally owned device when the County-issued iPad is not reasonably available for an operational need.
Agency Determination
OCCO permits personally owned devices to access OHLEG only as a documented operational exception. Personal-device access is not the preferred or routine method of access and may occur only for an authorized official purpose when timely access is necessary and a County-issued device or reasonable authorized alternative is unavailable or impractical.
Primary Rule
Use the County-issued iPad for OHLEG whenever practical. If the iPad is unavailable and the need can reasonably be met through the Ottawa County Sheriff's Office or another authorized law-enforcement partner, that assistance should be used instead of personal-device access.
Permitted Exception
A personally owned device may be used when timely OHLEG access is necessary for legitimate OCCO business and another reasonable authorized method is not available.
Required Documentation
Every personal-device OHLEG access shall be documented using the OCCO Personal Device Access Log, including the reason the personal device was required and the applicable OCCO case number when one exists.
Safeguards
- Do not intentionally download, save, photograph, or retain CJI/CHRI on the personal device.
- Do not place CJI/CHRI in personal email, text messages, notes, cloud storage, or messaging applications.
- Protect the screen from unauthorized viewing.
- Close the OHLEG session and lock the device when the official purpose is complete.
- Immediately report any suspected compromise, loss, unauthorized access, or retained CJI/CHRI.
Related OCCO Documents
Purpose
Establishes immediate reporting and documentation requirements for suspected or confirmed security incidents involving OHLEG credentials, CJI/CHRI, devices, improper disclosure, or unauthorized access.
Reportable Events
- Lost, stolen, or compromised device used to access OHLEG or CJI/CHRI.
- Suspected unauthorized OHLEG access or compromised credentials.
- CJI/CHRI viewed by an unauthorized person.
- Misdirected email, message, screenshot, file, or other transmission containing CJI/CHRI.
- Improper printing, storage, retention, disclosure, or disposal of CJI/CHRI.
- Any event creating a reasonable concern that CJI/CHRI may have been exposed or accessed without authorization.
Immediate OHLEG Notification
OHLEG Support shall be contacted immediately when OCCO becomes aware of a computer/cyber attack or suspected security event affecting OHLEG or CJI/CHRI, including phishing, malware, credential compromise, or unauthorized access.
OHLEG Quality Assurance / Support: 866-406-4534 · OHLEGQA@ohioAGO.gov
Internal Notification Order
- OHLEG/OAC / OHLEG Support
- OCCO Chief Investigator
- Ottawa County Prosecutor's Office
Immediate Actions
- Stop or contain the unauthorized activity when possible and safe.
- Secure the affected device, account, or information.
- Preserve relevant facts, times, persons, devices, and actions taken.
- Do not delay immediate notification while completing written documentation.
Lost or Stolen County Device
If a County-issued iPad or other managed County device used for OHLEG is lost or stolen, it shall be treated as a security incident. In coordination with County IT, the device may be remotely locked or wiped through the County mobile-device-management environment while required notifications, fact preservation, and incident documentation proceed.
Documentation
Complete the OCCO Security Incident Report as soon as practical after immediate notifications and containment actions are underway.
Related OCCO Documents
Purpose
Establishes the approved method for disposal of physical and electronic media associated with OHLEG/CJI and the destruction logs required for compliance review.
Electronic Copies
- CJI/CHRI that must be retained belongs in the authorized OCCO case record, including Coroner Files and the corresponding County Google Drive case file, as applicable to the investigation.
- Temporary copies on a County-issued device shall be deleted after successful upload to the official case file is confirmed.
- CJI/CHRI shall not be copied to personal cloud storage, removable personal media, personal email, or consumer file-sharing services.
Electronic Media Disposal Log
County IT controls the disposition of County-owned electronic equipment. County equipment awaiting destruction is transferred to County IT and held in a secured, locked, camera-monitored area within the courthouse until released to the County\'s approved third-party destruction provider. OCCO shall maintain or obtain the applicable disposal/destruction record for any device or media used to access OHLEG. The record should identify the date taken out of service, date of destruction, media type, serial number, method of destruction, and person or entity completing destruction.
The authoritative disposal/destruction record must be available for OHLEG inspection. When County IT maintains that record, OCCO shall be able to identify the responsible County IT process and obtain the record without delay.
Printing
OCCO personnel shall not routinely print CJI/CHRI obtained through OHLEG.
Inadvertent Physical Material
If CJI/CHRI is inadvertently printed or otherwise exists on destroyable physical material, protect it from unauthorized viewing until it can be destroyed.
Approved Physical Destruction
Cross-cut shred the material using the County-approved shredder and place the shredded material into the document destruction bin located in the first-floor Business Hub beside Human Resources.
Bulk Third-Party Destruction
When protected physical media is destroyed in bulk by a third-party contractor, maintain a Bulk Physical Media Destruction Log documenting the date, company performing destruction, description of the items, destruction method, and witness.
Required Log Retention
Applicable Electronic Media Disposal and Bulk Physical Media Destruction logs shall be retained for a minimum of 8 years.
Improper Disposal
If CJI/CHRI is lost, discarded improperly, or believed to remain accessible after attempted destruction, immediately follow the OHLEG / CJI Security Incident Reporting SOP.
Related OCCO Documents
Purpose
Consolidates OCCO administrative requirements for access scope, background checks, annual security-awareness training, user/agency agreements, credential security, 90-day roster validation, supporting inspection records, and access removal.
Access Classifications
Access is assigned according to job duties, operational need, and authorization. Personnel do not select their own access level.
- Full OHLEG User: directly authorized to access OHLEG because assigned duties require direct access.
- Limited CJI/CHRI Access: may handle CJI/CHRI associated with OCCO duties but does not directly access OHLEG unless separately authorized.
- Excluded: outside the current OHLEG/CJI compliance scope and shall not access or handle CJI/CHRI.
Background Checks
- Before a person is treated as authorized for direct or indirect CJI access, OCCO shall verify the applicable state-of-residency and national fingerprint-based background-check requirements and retain the supporting completion letters.
- For inspection readiness, BCI and FBI letters shall be available for every person determined to have CJI access unless OHLEG Quality Assurance has specifically confirmed that an item is not applicable.
- OCCO does not treat completed fingerprint background checks as annual renewal items unless OHLEG/BCI specifically directs otherwise.
- A dashboard status does not substitute for the underlying background-check letter.
Annual Security Awareness
- Personnel with direct or indirect access to OHLEG information shall complete required Security Awareness Training annually.
- The OHLEG Security Awareness Training Certificate or CJIS Security Certificate shall be retained and available for inspection.
- Completion and next-due dates are tracked in the OCCO Compliance Roster.
- Overdue required training may result in access restriction until corrected.
User / Agency Agreements & Credentials
- Every OHLEG account holder shall sign the required User Agreement before being granted access.
- The Agency Agreement shall be signed by the Agency CEO.
- Signed agreements shall be retained and available for inspection.
- OHLEG credentials are individual and shall never be shared.
- No person may conduct an OHLEG search under another investigator's account.
- Suspected credential compromise is a security incident.
90-Day Roster Validation
The agency OHLEG roster shall be validated within each 90-day period. The Chief Investigator is responsible for OCCO's office-level roster validation. Individual investigators are not required to independently track or complete the office-level validation. The most recent validation date shall be available for inspection.
Access Changes & Separation
- Update access classification when job duties, operational need, or authorization change.
- Coordinate immediate suspension, modification, or removal of OHLEG access when it is no longer required or authorized.
- Recover County-issued devices and other County property and return electronic equipment to County IT for secure wipe, reassignment, or approved disposal.
- Confirm CJI/CHRI is not retained in personal or unauthorized locations when access ends.
- Update the OCCO compliance record to reflect the access change or separation.
Records
The OCCO Compliance Roster is the operational status view. Supporting background, training, agreement, and credential documents remain in the authorized personnel/credentialing record.
Related OCCO Documents
| Date | Subject | Disseminated By | Record Type | Method of Dissemination | Recipient Agency / ORI | Recipient |
|---|---|---|---|---|---|---|
| Date Taken Out of Service | Date of Destruction | Media Type | Serial Number | Method of Destruction | Destroyed By |
|---|---|---|---|---|---|
| Date of Destruction | Company Performing Destruction | Brief Description of Items Being Destroyed | Method of Destruction | Witnessed By |
|---|---|---|---|---|
User / Agency Agreement
- Every OHLEG account holder signs the official OHLEG User Agreement before access is granted.
- The Agency CEO signs the official Agency Agreement.
- Use the official OHLEG agreement supplied by BCI/OHLEG; this app reference is not a replacement for the signed official form.
- Signed agreements must be available for inspection.
Annual Training Evidence
- Maintain the current OHLEG Security Awareness Training Certificate or CJIS Security Certificate for personnel with direct or indirect access.
- Training is annual.
Background Check Evidence
- Have the BCI and FBI fingerprint background-check letters requested by the pre-visit evaluation available for applicable CJI-access personnel.
- Do not substitute a spreadsheet or dashboard date for the underlying letter.
Roster Validation
- Be able to show that the OHLEG roster was validated within the preceding 90 days.
Required / Applicable Logs
- CHRI Dissemination Log, if dissemination occurs.
- Electronic Media Disposal Log for devices/media used to access OHLEG.
- Bulk Physical Media Destruction Log when third-party bulk destruction occurs.
- Retain applicable logs for at least 8 years.
- Facial Recognition Log remains applicable only if that OHLEG function is used in a manner requiring the log under OHLEG rules.
- Minimum 12 hours of continuing education in death investigation per calendar year
- All ABMDI-approved hours are accepted
- Non-ABMDI hours require Coroner approval before being counted toward the annual requirement
- New investigators: ABMDI registration within 2 years of hire
- Approved CE hours and supporting documentation are maintained through OCCO Credentialing
- Retain a certificate, transcript, completion email, or other verification when available
- Document whether the training is ABMDI-approved
- Submit non-ABMDI training for Coroner approval before applying the hours toward the annual total
- Maintain records in a format that can be produced for credential review, inspection, or audit
- Credential or training name
- Investigator
- Issue / completion date
- Expiration or renewal date, if applicable
- Credential or certificate number, when applicable
- Supporting document or certificate
- Status: Current / Due Soon / Expired / N/A
HOT (>90°F): Accelerates onset AND resolution
Cadaveric spasm: Instantaneous at moment of death — does NOT resolve like normal rigor
Cherry-red = CO poisoning or hypothermia | Brown/dark = methemoglobin
Rule: Decomp rate doubles every ~10°F above 50°F
Cooling: ~1–1.5°F per hour (70°F ambient, clothed, avg build)
Formula: Hours ≈ (98.6 − rectal temp) ÷ 1.5
Modifiers that break the formula:
Obesity / heavy clothing · Cold/wet · Hot ambient · Fever at death · Water (~5x faster)
| Indicator | Suggests |
|---|---|
| Blow fly eggs | Minutes–hours of death (outdoors, warm) |
| Maggots — 1st instar | 12–24 hours |
| Maggots — 2nd instar | 24–36 hours |
| Maggots — 3rd instar / mobile | ~48–72+ hours |
| Stomach contents digested | ~4–6 hrs after last meal |
| Urine / feces released | At or near time of death |
| Dried blood at wounds | Hours to days depending on environment |