FBI CJIS v5.9.2: Information Integrity & Authentication – Requirements and Compliance Simplified

There is a constant barrage of cyberattacks and breaches hitting all types of organizations, and law enforcement agencies are no exception.

Every law enforcement agency needs access to sensitive criminal information that is managed by the Federal Bureau of Investigation’s (FBI) Criminal Justice Information Services (CJIS). Naturally, the FBI needs to ensure that its data remains safe when shared with outside agencies. Recent Criminal Justice Information Services (CJIS) regulations have introduced stringent new rules that define how law enforcement agencies must protect criminal justice information. Agencies failing to meet and comply with the policy requirements may be denied access and face monetary fines.

In this session we will discuss the latest FBI’s CJIS v 5.9.2 policy updates. In particular, panelists will discuss 2 aspects of the policy pertaining to software and firmware integrity and detection that went into effect on Oct 1, 2023, and multi-factor authentication policy that will go into effect on Oct 1, 2024. We will explore solutions that can be implemented for meeting and maintaining compliance on firmware security. Further, we will discuss solutions and options available for attaining compliance on the enhanced multi-factor authentication requirements.