CJIS Physical Security Requirements 2

Question 1

Under CJIS Security Policy, which type of area requires the most stringent physical security controls for systems processing CJI?

Accepted Answer

Physically secure location with two-factor entry

Answer

CJIS requires a physically secure location with at least two-factor authentication for areas where CJI is processed.

Question 2

What is the minimum requirement for escorting visitors in a CJIS-defined physically secure location?

Accepted Answer

Visitors must be escorted at all times by authorized personnel

Answer

CJIS policy requires that visitors in physically secure locations be escorted at all times by authorized personnel.

Question 3

Which control is specifically required to detect unauthorized physical access attempts to areas containing CJI systems?

Accepted Answer

Intrusion detection systems

Answer

CJIS requires intrusion detection systems to monitor and alert on unauthorized physical access to CJI areas.

Question 4

A local police department stores backup CJI media in a locked filing cabinet outside the secure area. What CJIS requirement does this violate?

Accepted Answer

Physical protection of media in transit or at rest

Answer

CJIS requires CJI media to be physically protected whether in transit or at rest, including secure storage within authorized areas.

Question 5

How often must physical security controls for CJIS facilities be reviewed according to the CJIS Security Policy?

Accepted Answer

At least every three years or when significant changes occur

Answer

CJIS requires physical security controls to be reviewed at least every three years or whenever significant changes occur.

(CJIS) Criminal Justice Information Services Certified Practice Test