FBI's CJIS v6.1: What Security Teams Need to Know.
-
The FBI has released CJIS Security Policy v6.1, tightening requirements around encryption and vulnerability scanning while continuing the shift toward more continuous security assessment. According to Specops, the update also touches on password, MFA, and identity requirements that agencies will need to address ahead of upcoming audits.
Key areas of focus in v6.1 include:
- Stronger encryption requirements for protecting criminal justice information
- Updated vulnerability scanning obligations
- Continued movement toward continuous security assessment rather than point-in-time checks
- Revised password, MFA, and identity requirements that agencies must meet before audits
Security teams supporting criminal justice agencies should review their current controls against these updated requirements and prepare for the audit implications of the continuous assessment model.
Source: BleepingComputer
How is your organization approaching the CJIS v6.1 password and MFA changes ahead of your next audit?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login