CJIS audit findings on authentication usually come down to one overlooked path into criminal justice information (CJI). The dispatch center workstations were covered. The patrol laptops were covered. Then a detective ran a plate from a parking lot on a tablet, through a browser session that asked only for a password.  That one path is […]

Ask a messaging vendor whether their product is secure, and the answer will likely open with encryption. Ask the question the way a CJIS auditor will ask it, and the answers change.  The FBI rebuilt the Criminal Justice Information Services (CJIS) Security Policy in December 2024 around the National Institute of Standards and Technology (NIST) […]

A task force partner asks for a full case file by Friday, and the prosecutor wants the recorded interviews with it. The detective’s first move will be to attach everything to an email, which will not survive an audit, but the agency has never put an approved alternative in writing. The file goes out anyway, […]

On Sept. 22, 2026, the National Institute of Standards and Technology (NIST) will move every Federal Information Processing Standards (FIPS) 140-2 cryptographic module certificate to historical status. The Criminal Justice Information Services (CJIS) Security Policy states separately that FIPS 140-2 certificates will not be acceptable after that date, which is why a CJIS compliance consultation […]

The move from CJIS Security Policy 5.9.5 to 6.0 has created obligations to upgrade systems that many local departments are struggling to fund. Stronger multi-factor authentication (MFA) requirements, continuous monitoring, and supply chain risk management are often cited as major drivers of new costs, but are far from the only updates that need to happen […]

Personal devices improperly accessing criminal justice information (CJI) are among the most common findings in a CJIS audit, and personal mobile devices have been able to access that information since at least 2012. For mobile devices to access CJI and be compliant with CJIS Security Policy, certain conditions, which may be prohibitive, have to be […]

Suppose that your CJIS audit is on the calendar, but nobody knows who wrote the incident response plan sitting on a shared drive. People throughout the administration know the document exists, but not whether it satisfies anything specific to criminal justice information, or whether it is simply the countywide IT continuity plan with a CJIS […]

CJIS (Criminal Justice Information Services) audits can quickly become overwhelming when communication records, user permissions, and audit logs are scattered across multiple legacy systems.  MessengerNow helps law enforcement agencies bring those records together in one environment, making it easier to document activity, respond to auditor requests, and support ongoing compliance with the FBI CJIS Security […]

Routine forms often feel like the easiest reports to complete, yet they’re frequently where small inconsistencies begin to accumulate.  MessengerNow helps agencies establish a consistent process for recurring CJIS (Criminal Justice Information Services) submissions, providing officers with a standardized guideline that supports accurate reporting across all shifts and experience levels. In This Article: Repetitive forms […]