FBI Has Updated The Criminal Justice Information Services (CJIS) Security Policy

As noted in its Executive Summary, the Criminal Justice Information Services Security Policy (CJISSECPOL) provides guidance to every criminal justice or non–criminal justice agency, private company, or individual contractor that has access to or acts in support of criminal justice services and information. Criminal Justice Information (CJI) data includes biometric, identity history, biographic, property, and case/incident history, and the personally identifiable information (PII) included therein.

By design, this thorough security policy has a direct impact on the daily operations and technological posture of the vast majority of government agencies and nearly all law enforcement organizations. There is a requirement to perform a self-audit annually, and a formal audit occurs every three years. There are separate levels of required security training for different classes of employees, and detailed guidance on the proper access, use, and dissemination of sensitive