Canonical Framework Canonical Frameworks

CJIS Security Policy

FBI CJIS Security Policy v5.9 compliance for organizations accessing criminal justice information (CJI). Covers 13 policy areas including access control, auditing, data encryption, physical security, and personnel security. Required for any system handling NCIC, NLETS, or state criminal-history data.

Regions

US

Regulations

3 covered

Control Domains

7 domains

Deployment

Fully Air-gapped, Sovereign Region

Regulations & Standards

FBI CJIS Security Policy v5.9 28 CFR Part 20 NCIC Operating Manual

Control Domains

Access Control
Audit Logging
Data Encryption
Physical Security
Incident Response
Personnel Security
Media Protection

Deployment Options

Fully Air-gapped
Sovereign Region

Get started in 3 steps

1

Explore the template

Click "Explore in Console" to open this template in the Keeptrusts configuration editor.

2

Customize policies

Adjust detection thresholds, escalation rules, and redaction patterns to match your requirements.

3

Deploy to your gateway

Save your configuration and deploy it to any Keeptrusts gateway — cloud, on-prem, or air-gapped.