Note: This message is displayed if (1) your browser is not standards-compliant or (2) you have you disabled CSS. Read our Policies for more information.

The following e-mail was received regarding the posting of the CJIS Security Policy on the Internet.
Sent: Friday, June 13, 2003 2:52 PM
Subject: Posting/Disseminating the CJIS Security Policy
Greetings again today. Please be advised of the following official notice that I must pass on to you.
At the June Advisory Policy Board (APB) meeting last week, and per recommendation of the Security & Access Subcommittee, the APB voted favorably that the current version of the CJIS Security Policy was to be disseminated only through the use of LEO and other secure law enforcement intranets. This means that the CJIS Security Policy should not be disseminated to others via the Internet and it should not be posted on your CTA's home page for public access and review. If the policy is on a public access home page, please remove it immediately. If you choose to post the policy on a secure law enforcement site, please include a caveat which directs other agencies to contact your state CTO for details to ensure they are in receipt of the latest version. (The current version is still 3.1, September 2002.) Including the caveat is also per the approval of the APB.
For your information, the Security & Access Subcommittee is currently reviewing a "sanitized" version of the current CJIS Security Policy. After their review, they will make a recommendation as to the possible posting and dissemination of the sanitized version of the policy using the Internet. I will inform you of their recommendation when same has been received.