In the context of the FBI CJIS Security Policy, a non-criminal justice agency refers to an organization or entity that is not primarily involved in the administration of criminal justice. Non-criminal justice agencies typically do not have direct law enforcement authority or responsibilities but may have a need to access or handle criminal justice information for specific purposes.
In the context of the FBI CJIS (Criminal Justice Information Services) Security Policy, a Contracting Government Agency (CGA) refers to a government entity or agency that has entered into a contractual agreement with another government agency or organization to access and use CJIS systems or criminal justice information.
The FBI CJIS Security Policy outlines the security requirements and guidelines that govern the access, handling, and dissemination of criminal justice information, including sensitive data such as fingerprints, criminal histories, and other law enforcement-related information. It applies to various entities, including federal, state, local, and tribal government agencies that have access to CJIS systems and data.
When a government agency or organization contracts with another government agency to provide services or access CJIS systems, the contracting government agency (CGA) is the agency that is providing the services or granting access to the contracted entity. The CGA is responsible for ensuring that the contracted entity complies with the security requirements and safeguards outlined in the CJIS Security Policy.
The CJIS Security Policy defines specific requirements and processes that CGAs must follow when granting access to CJIS systems to contracted entities. This includes conducting background checks, ensuring proper training and awareness, and implementing appropriate security controls to protect the confidentiality, integrity, and availability of criminal justice information.
The contracting government agency (CGA) plays a vital role in overseeing the security of CJIS systems and data when they extend access privileges to contracted entities, ensuring that the information is handled and protected in accordance with the CJIS Security Policy and applicable regulations.
We Provide a Full Life Cycle of Solutions for FBI CJIS Policy Compliance
- Gap Assessments
- Policies and Procedures Writing
- Independent CJIS Security Assessments
- CJIS Specific Continuous Monitoring Programs