Security Program

We manage CJIS security requirements as defined in the CJIS Security Policy Manual. This includes the administration, operational, physical and technically security requirements that are required and subject to audit.

FBI ITS Audit Presentation
Training Links
Tier 1 Security Awareness

CJIS Security Policy_v5-9.pdf
CJIS Security Requirements Companion Document_v5-9.pdf

Select the link below to view the most current FBI CJIS Security Policy Page.

FBI CJIS Security Policy Page

2020

January	Klamath/Lake
February	Multnomah
March	Multnomah
April	Hood River
May	Polk
June	Crook/Grant
July	Douglas
August	Josephine
September	Deschutes
October	Coos
November	Jackson/Wasco
December	Umatilla

Pre-Audit Questionnaire **REQUIRED**
Management Control Agreement
Security Addendum
MOU Example
Interagency Agreement Example.pdf
User Account Access Validation Example
Physical Protection Policy Example
Media Protection Policy
Disposal of Media Policy
Systems User Agreement
Personally Owned Device Policy
Acceptable Use Policy Example
Disciplinary Policy Example
Security Alerts & Advisory Policy Example
Network Diagram Example
AA Decision Tree
Incident Handling and Response Plan
Media Destruction GSA Catalog
Sign up for CJIS Listserve

OSCIO Cloud Security Policy
NIST Publication 800-153
NIST Publication 800-84
Federal Information Processing Standards 140-2 Annex A
Federal Information Processing Standards 140-2 Annex B
Federal Information Processing Standards 140-2 Annex C
Federal Information Processing Standards 140-2 Annex D

Contact

CJIS Information Security Officer
Nicholas C. Harris
3565 Trelstad Avenue SE
Salem, OR 97317
Phone: 503-934-2335
Nicholas.Harris@osp.oregon.gov

Tip: PDF Document not opening in your browser? Download the document to your computer first, and open it using a free reader Adobe Reader.

Security Program

Training

Policy

Security Audit Schedule

Prepare IT Security Audit

Reference