The views of this article are the perspective of the author and may not be reflective of Confessions of the Professions.
The Criminal Justice Information Services (CJIS) of the Federal Bureau of Investigation is tasked to protect and observe people in their activities in using text messages as it can be used for illicit acts of crime. Because of this, the CJIS Security Policy has been created.
Businesses that use messaging archivers should comply with the legislation and make sure that they are certified with the standards of CJIS. There are key requirements that businesses need to comply before a certification is handed to them.
Some of the ground rules include performing weekly audits, moderating account management, locking a user’s session after an hour of inactivity, monitoring various login activities such as changes in passwords, and restriction of access due to physical location, job assignment, time of day, and network address.
Another requirement the FBI requires is the FBI Security Policy 188.8.131.52.1 or also known as Advanced Authentication Requirement that mandates businesses and organizations to use multi-factor authentication if employees are accessing CJI. This means that enterprises need to use software applications or devices that generate unique, one-time passwords with time limits.
Training employees is also a requirement for CJIS certification. Training should be frequently done with proper documentation and knowledge circulation. The security protocols and password requirements should be the same in the entire business. If you have no idea on how are you going to train the employees of your organization, you can always seek the assistance of compliance consultants.
With these being said, one can argue that getting the requirements is not that easy and it requires time to comply. However, if these requirements are complied, one can make sure that a business does not have to face the law for legal sanctions.
For messaging vendors, CJIS is a crucial part of the business. This TeleMesage infographic will tell you everything you need to know.