CJIS Policies & Compliance Standards 2

Question 1

Under the CJIS Security Policy, how often must agencies conduct a formal security assessment of their information systems?

Accepted Answer

Annually

Answer

The CJIS Security Policy requires agencies to conduct a formal security assessment of their systems at least annually.

Question 2

Which of the following best describes the role of a Terminal Agency Coordinator (TAC) under CJIS policy?

Accepted Answer

Serves as the liaison between the agency and the CSA for CJIS matters

Answer

The TAC serves as the point of contact between the criminal justice agency and the CJIS Systems Agency for all CJIS-related matters.

Question 3

What is the minimum password length required by the CJIS Security Policy for accounts accessing CJI?

Accepted Answer

8 characters

Answer

The CJIS Security Policy mandates a minimum password length of 8 characters for accounts that access Criminal Justice Information.

Question 4

A private contractor processes CJI on behalf of a criminal justice agency. Which agreement MUST be in place before access is granted?

Accepted Answer

A CJIS Security Addendum

Answer

Private contractors must sign the CJIS Security Addendum, which binds them to the same security requirements as criminal justice agencies.

Question 5

Under CJIS policy, how long must agencies retain audit logs for systems that access CJI?

Accepted Answer

One year

Answer

The CJIS Security Policy requires that audit logs be retained for a minimum of one year to support investigations and compliance reviews.

(CJIS) Criminal Justice Information Services Certified Practice Test