Hey all, 

Roses are red, violets are blue, 6.0 is here, don’t have CJIS compliance fear. 

If you’ve been keeping up with our newsletters, you may already know version 6.0 of the CJIS Security Policy just hit the streets and there are some new control families. In our last newsletter, we covered what changes were made which you can find in our newsletter archive.

The latest version of the CJIS Security Policy can also be found here, and the Requirements Companion Document outlining priority levels for each control is here. 

The Requirements Companion Document can help you identify which controls you need to have in place today, including those that are either “existing” or are a “Priority 1”. The good news is that any control identified as “Zero-cycle” and as a Priority 2 through 4 in the new control families, or previously published ones, will be sanctionable starting in October 2027. 

While there’s still some time to get these controls in place, it’ll creep up on us just like 6.0 did. 

Let CJIS ACE whisk you off your feet this Valentines Day with a CJIS knowledge transfer through an assessment, assist with questions through consulting hours, or set you up with a CJIS Insight subscription to track your compliance. I promise, we won’t make you CHRI. If you’re interested in more information, you can reach us at info@cjisace.com.

Talk soon,

Edith Kowalik