standard

CJIS Security Policy

The FBI's security policy for agencies and vendors that handle criminal justice information, setting the controls a system must meet to access CJIS services. Since version 6.0 it is organized around control families aligned with NIST SP 800-53 and priority tiers with phased sanction dates.

Known aliases

CJISSECPOL
CJIS Security Policy v6.1

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

CJIS v6.1 doubles the key strength required for criminal justice data outside secure locations

The FBI published version 6.1 on June 25, 2026, keeping v6.0's NIST-aligned structure while lifting SC-13 and SC-28 to a 256-bit minimum and tripling how often agencies must run vulnerability scans.

Publishers:bleepingcomputer.com

Reality

Evidence42
Adoption38
Hype gap+20
Incentives85
Confidence45