IntelliGRC Adds Support for the FBI CJIS Security Policy v6.1

CJIS prescribed values come identified, conflicts are flagged, and controls customers have already implemented carry over through the IntelliGRC Intelligent Control Library

FAIRFAX, Va., Oct. 13, 2026 /PRNewswire/ -- IntelliGRC, a cybersecurity governance, risk, and compliance (GRC) platform purpose-built for managed service providers (MSPs) and managed security service providers (MSSPs), today announced support for the FBI's Criminal Justice Information Services (CJIS) Security Policy v6.1. IntelliGRC customers can now manage CJIS in the same platform as the rest of their compliance programs, starting from the controls and assessment boundaries they have already built. For MSPs and MSSPs that serve police departments and sheriffs' offices, CJIS becomes a new service line they can offer to every agency they support.

The CJIS Security Policy sets the minimum-security requirements for protecting Criminal Justice Information (CJI). It applies to criminal justice agencies, non-criminal justice agencies, and the vendors and service providers that access CJI or run systems that process, store, or transmit it. The FBI published v6.1 on June 25, 2026, building on a modernization that reorganized the policy around NIST SP 800-53 control families.

That foundation means most CJIS requirements will look familiar to anyone who knows NIST SP 800-53. The difference is who sets the values. NIST SP 800-53 leaves many parameters, such as how often, how quickly, and how many, for each organization to define. CJIS prescribes many of them. Users, for example, are limited to five consecutive invalid logon attempts in 15 minutes. IntelliGRC comes with these CJIS prescribed values identified and detects conflicts, so teams know exactly what is required and where they may have gaps.

Customers also don't start from scratch. Whatever frameworks a customer already manages in IntelliGRC, the requirements they share with CJIS carry over through the Intelligent Control Library (ICL). Existing assessment boundaries and implemented controls can be reused toward CJIS.

"The FBI spells out many of the exact values CJIS expects, down to how many failed logons a user gets before lockout," said Ozzie Saeed, founder and CEO of IntelliGRC. "Our customers need those values in front of them, and they need credit for the work they've already done. IntelliGRC gives them both, so CJIS builds on the program they already run instead of becoming a separate project."

MSPs and MSSPs can bring CJIS into the compliance program they already run, starting today. Explore CJIS in IntelliGRC or schedule a personalized demo.

About IntelliGRC
IntelliGRC is a provider-centric cyber governance, risk and compliance platform that helps MSPs and MSSPs deliver high-caliber GRC as a Service at scale. Built for service providers managing many clients at once, IntelliGRC combines asset-centric modeling, its Intelligent Control Library and practitioner-tuned AI to turn complex, evolving compliance requirements into repeatable, profitable offerings for the Defense Industrial Base and other regulated markets. Learn more at intelligrc.com.

SOURCE IntelliGRC