The Criminal Justice Information Services (CJIS) v6.0 framework will be available on April 1. CJIS is a government framework that was designed to assess the security of controls implemented for law enforcement, national security, and intelligence community partners.
The CJIS framework includes 13 core security control areas and three more general policy and procedure control areas. These areas each include many individual requirements that must be addressed by any entity that accesses the CJIS network. CJIS was established in 1992 by the Federal Bureau of Investigation (FBI).
Apptega has created a framework based of the newest version of the framework (v6.0). The framework includes all requirements in the framework broken down by control area and in some cases more granular within the control area. Not all individual statements within the controls are separated due to the length of the framework (Approximately 1578 individual statements). Those that are not separated by individual statements are grouped into their original control requirement to ensure accurate assessments.
CJIS v6.0 is being released as a framework only and will not include additional tools such as a created assessment, a taskpack, or mapping for our Harmony program. These items are being researched and may be included at a time in the future.
While a separate assessment has not been created, the way the framework is designed, it can easily be used for the assessment phase of a CJIS v6.0 engagement by answering the controls in the framework the same as they would be answered in the assessment. In many ways, this will be a more thorough assessment as it will include all individual statements, where a created assessment would not be able to due to size constraints. If you are an assessment only client that needs the CJIS framework, please speak with your Partner/Customer Success Manager for your potential options to use this framework.
