Rochelle Eichner

Better than a sleeping pill or a riveting read?
Welcome back to the third and final post in this series on the CJIS Security Policy. Our last post ended with Policy Area 7 of section 5 concerning Network Diagrams.
Policy Area 8 covers Media Protection and how to protect it both in transit and at rest.

Better than a sleeping pill or a riveting read?
In our last blog post, Alan Ferretti, CJIS Security Analyst and Subject Matter Expert of the CJIS ACE Division at Diverse Computing, and I covered the first four sections of the CJIS Security Policy.

Better than a sleeping pill or a riveting read?
Recently Alan Ferretti and I were talking about compliance for agencies and lamented on the fact that most people malign  the CJIS Security Policy as a good cure for insomnia. It seems you can’t attend a conference where a speaker doesn’t make a joke about it.

Microsoft has signed agreements with 28 states – now over 50% of the states are covered representing 70% of U.S. sworn officers.
Microsoft contractually committed to the applicable controls of the CJIS Security Policy by signing a CJIS Information Agreements with Indiana and Iowa.

“I have worked with hundreds of vendors in my twelve years as CJIS ISO in Texas, and never have I found any vendor more committed to law enforcement.”  Alan Ferretti, Former CJIS ISO in Texas 
Alan Ferretti, former Texas CJIS Information Security Officer (ISO),

Microsoft has signed agreements with 26 states – contractually committing to CJIS requirements for more than 2/3rds of the US Population
Do you ever wonder why we have government regulation?  Do you have to deal with regulations to get your job done?

California Law Enforcement Telecommunications System (CLETS) provides law enforcement and criminal justice agencies access to FBI and state Criminal Justice Information, along with the ability to communicate messages to other agencies within California, other states and Canada.  As the interface to criminal justice information systems,

Meeting the applicable regulatory controls of the CJIS Security Policy is a long-term commitment for Microsoft. We don’t consider it a checkbox, it is a commitment. As part of this commitment Microsoft recently signed the CJIS Security Addendum with Utah–bringing the total states which Microsoft has signed the CJIS Security Addendum to 25.

Microsoft has now contractually committed to CJIS requirements in 24 states, covering nearly 2/3rds of the US population
Microsoft has a long-term commitment to providing law enforcement agencies with cloud services they can trust to help keep them CJIS compliant.  As part of this commitment Microsoft recently signed the CJIS Security Addendum and contractually committed to the applicable CJIS Security Policy controls with Georgia.

With the recent heartbreaking public safety events in New York, New Jersey, North Carolina, Minnesota and other locations around the United States, it was inspiring to have the opportunity for Microsoft to participate in the South Carolina Law Enforcement Division (SLED) User Conference.