Control frameworkCompliance & Audit

CJIS Security Policy policy template

Review this template's scope and control areas. Then, open it in the Verdictan console to adapt and test the configuration for your environment.

Map controls for agencies and contractors that handle criminal justice information. The template references the FBI Criminal Justice Information Services Security Policy. It covers authentication, personnel, facilities, media, encryption, audits and incidents where the gateway can provide controls or evidence.

Use this template as a starting configuration and control map. It does not provide certification, legal advice or a compliance guarantee. Confirm your obligations, adapt the configuration and test every outcome before deployment.

Regions

US

Source references

3 source references

Control areas

7 mapped control areas

Deployment options

Fully air-gapped, Sovereign region

Source frameworks, standards and obligations

FBI CJIS Security Policy v6.128 CFR Part 20NCIC Operating Manual

Control areas mapped by this template

Access control
Audit logging
Data encryption
Physical security
Incident response
Personnel security
Media protection

Deployment options

Fully air-gapped
Sovereign region

Adapt the template in three steps

1

Review the scope

Confirm that the regions, source references, control areas and deployment options fit your use case.

2

Adapt the configuration

Open the template in the Verdictan console. Set its policies, thresholds, routing and review requirements for your environment.

3

Test before deployment

Test each policy outcome. Confirm that allowed, redacted, blocked and reviewed requests behave as expected.