FBI's CJIS v6.1: What Security Teams Need to Know.
Summary
The FBI's Criminal Justice Information Services (CJIS) Security Policy has been updated to version 6.1, introducing stricter requirements for encryption and vulnerability scanning. This update emphasizes a move towards continuous security assessments, requiring agencies to adapt their practices for password management, multi-factor authentication (MFA), and identity controls in preparation for upcoming audits.
IFF Assessment
This article discusses security policy updates and best practices, which are beneficial for defenders in understanding and implementing stronger security measures.
Defender Context
This update to the CJIS Security Policy is critical for organizations handling criminal justice information, as it mandates enhanced security controls. Defenders should pay close attention to the new requirements for encryption, vulnerability scanning, and continuous assessment to ensure compliance and mitigate risks.