Vendor guide lists five CJIS v6.1 priorities for criminal-justice agencies
Original title: CJIS v6.1 Compliance: 5 Practical Priorities for Agencies
Specops pitches MFA and password tools while recapping IA-2, IA-5 and account-review rules agencies already face.
A BleepingComputer article walks agencies that handle Criminal Justice Information through five CJIS v6.1 areas: MFA, account management, passwords, logging and audit readiness. It restates control details such as IA-2 MFA, an eight-character IA-5 minimum sanctionable since October 2024, 72-hour removal of temporary accounts and audits at least every three years. Much of the piece promotes Specops Secure Access, Password Policy and a free Password Auditor scan.
- IA-5 eight-character minimum is a Priority 1 control sanctionable since October 2024.
- Temporary and emergency accounts must be removed within 72 hours.
- Accounts inactive for 90 days must be disabled within one week.
- Agencies are audited at least once every three years.
- CA-5 remediation plans should be updated at least every six months.
- Vendors
- Specops
From the original article
4 min read at bleepingcomputer.com
CJIS v6. 1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ongoing compliance. Specops outlines five practical priorities covering MFA, account management, passwords, logging, and audit readiness.
By Sponsored by Specops Software · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.