Security Program

We manage CJIS security requirements as defined in the CJIS Security Policy Manual. This includes the administration, operational, physical and technically security requirements that are required and subject to audit.

FBI ITS Audit Presentation
Training Links
Tier 1 Security Awareness

CJIS Security Policy - Version 5.9.5 (July 9, 2024)
CJIS Security Policy Requirements Companion Document - Version 5.9.5 (July 9, 2024)
Select the link below to view the most current FBI CJIS Security Policy Page.

FBI CJIS Security Policy Page

2024

January	Clackamas
February	Washington
March	Malheur/Harney/Polk
April	Multnomah
May	Union/Baker/Wallowa
June	Crook/Grant
July	Deschutes
August	Josephine/Curry
September	Douglas
October	Hood River/Jefferson
November	Klamath/Lake
December	Jackson

Pre-Audit Questionnaire **REQUIRED**
Management Control Agreement
Security Addendum
MOU Example
Interagency Agreement Example.pdf
User Account Access Validation Example
Physical Protection Policy Example
Media Protection Policy
Disposal of Media Policy
Systems User Agreement
Personally Owned Device Policy
Acceptable Use Policy Example
Disciplinary Policy Example
Security Alerts & Advisory Policy Example
Network Diagram Example
AA Decision Tree
Incident Handling and Response Plan
Media Destruction GSA Catalog
Sign up for CJIS Listserve

OSCIO Cloud Security Policy
NIST Publication 800-153
NIST Publication 800-84
Federal Information Processing Standards 140-2 Annex A
Federal Information Processing Standards 140-2 Annex B
Federal Information Processing Standards 140-2 Annex C
Federal Information Processing Standards 140-2 Annex D

NIST Access Control Policy.docx

NIST Auditing and Accountability Policy.docx

NIST Awareness and Training Policy (AT).docx

NIST Configuration Management Policy.docx

NIST Identification and Authentication Policy.docx

NIST Incident Response Policy.docx

NIST Maintenance Policy.docx

NIST Media Protection Policy.docx

NIST Personnel Security Policy.docx

NIST Physical and Environmental Protection Policy.docx

NIST Planning Policy.docx

NIST Risk Assessment Policy.docx

NIST System and Communications Protection Policy.docx

NIST System and Information Integrity Policy.docx

NIST System and Services Acquisition Policy.docx

Contact

CJIS Information Security Officer
Nicholas C. Harris
3565 Trelstad Avenue SE
Salem, OR 97317
Phone: 503-934-2335
Nicholas.Harris@osp.oregon.gov

Tip: PDF Document not opening in your browser? Download the document to your computer first, and open it using a free reader Adobe Reader.

Security Program

Training

Policy

Security Audit Schedule

Prepare IT Security Audit

Reference

CJIS Security Examples and Templates