The FBI CJIS (Criminal Justice Information Services) Security Policy includes specific incident response requirements that criminal justice agencies must follow when handling security incidents involving CJIS data. These requirements aim to ensure the timely identification, containment, and mitigation of security incidents to protect the integrity and confidentiality of criminal justice information.

The FBI CJIS (Criminal Justice Information Services) Security Policy outlines specific requirements for awareness and training to ensure the secure handling and protection of criminal justice information. Key awareness and training requirements outlined in the FBI CJIS Security Policy include the following:

The FBI CJIS Security Policy outlines the security requirements and guidelines that organizations must adhere to when accessing, handling, or storing Criminal Justice Information (CJI) provided by the Federal Bureau of Investigation's Criminal Justice Information Services Division (CJIS). The policy aims to ensure the confidentiality, integrity, and availability of CJI, as well as protect the systems and infrastructure that handle this sensitive information. Notable elements of the FBI CJIS Security Policy include the following:

Access control is a critical aspect of implementing the FBI CJIS Security Policy. The FBI CJIS Security Policy is essentially built on the NIST 800-53 framework, therefore, developing industry leading security policies on NIST 800-53 is essential for FBI CJIS compliance. Best practices for contractors, private entities, noncriminal justice agencies representatives, or members of a criminal justice entity to consider when establishing access control measures include the following: