The multi-factor authentication requirement in the FBI’s Criminal Justice Information Services (CJIS) Security Policy becomes auditable and sanctionable from today.
Key points
- All access to criminal justice information (CJI) must use multi-factor authentication.
- The requirement follows the modernisation of the policy to align with NIST SP 800-53.
- Agencies and their vendors will be audited against the requirement.
- Vendors must also sign the CJIS Security Addendum and meet personnel screening requirements.
UK technology providers supplying US police, courts or other criminal justice agencies should make sure their products and support processes meet CJIS authentication requirements.
Source: CJIS Security Policy Resource Center (FBI)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
