The move from CJIS Security Policy 5.9.5 to 6.0 has created obligations to upgrade systems that many local departments are struggling to fund. Stronger multi-factor authentication (MFA) requirements, continuous monitoring, and supply chain risk management are often cited as major drivers of new costs, but are far from the only updates that need to happen in the coming months.
The federal government offers law enforcement grants, many of which local departments can use to help offset these costs.
Why Compliance Upgrades Are Fundable at All
Congress and federal agencies recognize that state and local cybersecurity, including securing criminal justice information (CJI), is a national priority. At the same time, they recognize that many small and rural agencies have neither the budget nor the expertise to implement the controls required under the updated Security Policy. Federal grants help lower the barriers these communities find as they work toward meeting the new standards.
The Edward Byrne Memorial Justice Assistance Grant Program (34 U.S.C. 10151 through 10158) is known as Byrne JAG and is the “leading source of federal justice funding to state and local jurisdictions.” It allows funds to be used for equipment, contractual support, training, technical assistance, and information systems across eleven program areas.
This includes the planning, evaluation, technology improvements, and more, which need to happen as part of the change to Security 6.0. Federal guidance is not always specific about what budget items do and do not apply. But multi-factor authentication rollouts, centralized audit logging, and mobile device management platforms, for example, generally fall within the existing purpose areas. However, the majority of applications go through a review process at the federal level (aside from those that receive pass-through funding).
The takeaway of this is that applications don’t always need a new funding category. Often, they only need to show how the upgrade fits inside a funding category that already exists, subject to what the current solicitation actually allows.
The Programs Worth Knowing
While Byrne JAG is an important source of federal funding for law enforcement grants, there are others. Many either focus on particular aspects of security compliance, or have different avenues for procurement.
| Program | Administered By | Best Fit For |
| Byrne JAG | Bureau of Justice Assistance, with state and local allocations | Technology, training, and contractual support tied to criminal justice purpose areas |
| NCHIP (National Criminal History Improvement Program) and NARIP (NICS Act Record Improvement Program) | Bureau of Justice Statistics, awarded through the state | Criminal history record system upgrades and improvements to records feeding FBI systems |
| SLCGP | CISA (Cybersecurity and Infrastructure Security Agency) and FEMA (Federal Emergency Management Agency), awarded through the state | Cybersecurity projects, though funding and authorization are time-sensitive heading into late 2026 |
| State programs | Your state administering agency | Varies with state priorities and calendar |
The National Criminal History Improvement Program (NCHIP) helps states automate and upgrade criminal history record systems that connect to FBI systems, including the National Instant Criminal Background Check System and the National Sex Offender Registry. Awards go to agencies that are typically designated by the state’s governor, so a local department typically applies through that state agency rather than directly to the Bureau of Justice Statistics.
The NICS Act Record Improvement Program (NARIP) is also awarded federally and administered by the state’s governor’s office or the state’s court administrative office. It is a purpose-built program to improve records for the National Instant Criminal Background Check System (NICS) used to determine a person’s eligibility to purchase firearms.
The State and Local Cybersecurity Grant Program (SLCGP) was created by the State and Local Cybersecurity Improvement Act to help states, tribes, and local governments improve their cybersecurity. Only state and tribal administering agents can make applications. Local governments and agencies are given sub-awards.
Authorization for the SLCGP currently runs only through September 30, 2026. Funding levels have dropped sharply from earlier years, and the required local match has climbed in recent cycles. If you’re building a request around SLCGP, confirm the program’s status with your state administering agency before you commit too many resources to it.
What Byrne JAG Will and Won’t Cover
Byrne JAG Prohibited Equipment Guidance defines what the program can and cannot cover. In particular, it doesn’t allow JAG to provide “security enhancements or equipment to a nongovernmental entity not engaged in criminal justice or public safety.”
BJA can award waivers for the following items, but in general, it also does not cover:
- Vehicles, vessels, or aircraft other than police cruisers, police boats, and police helicopters
- Luxury items
- Real estate
- Construction projects (other than penal or correctional facilities)
In discussions of compliance upgrades for Security Policy 6.0, requests should be reviewed against these controlled categories. While waivers can be given for some items, they have to be in writing before funds can be committed.
How to Frame Compliance in the Narrative
When creating a grant proposal, create a narrative that focuses on the outcome for public safety rather than for departmental compliance. For example, describe the effect on the public good if a patrol officer were to gain faster access to accurate criminal history in the field.
With the framing, next tie line items in a proposal to measurable results the agency can report. If you’ve had a CJIS audit finding, a security assessment, or documented incident, these give grant reviewers evidence for how the department will apply the funds.
What Slows Applications Down
Most local agencies don’t apply directly to a federal agency. They go through their state administering agency, which runs on its own calendar and has its own priorities. Aligning that calendar with federal application windows and the local agency’s need is critical to having applications reviewed in a timely fashion.
Federal criminal justice funds also generally can’t replace money an agency has already committed to the same purpose in its own budget. Federal funds are meant to supplement local budget items. This means that how the language frames the request is important to its success.
Finally, grant proposals should be as precise as possible, with firm scopes, realistic timelines, and budgets with supporting documentation. While no one can guarantee a proposal’s acceptance, framing it with concrete details helps.
Getting Help Before the Deadline
The strongest grant proposals begin months before the deadline. That lead time goes toward confirming which programs fit, finding measurable outcomes the reviewer can assess, and building a budget they can follow line by line.
OpenFox can help you map a planned upgrade to the right purpose area before a solicitation opens. Contact us today to align your law enforcement grant strategy with the CJIS upgrades already on your roadmap.
