🔐 CJIS v6.0 – Local Agency Assessment Workbook

CJIS Security Policy – Local Agency Audit Working copy – not an official FBI / CSA form

Use this page to capture assessment notes and status for a local agency’s CJIS v6.0 readiness / pre-audit preparation. Progress can be saved locally, exported to JSON, or printed.
Important: Unofficial tool + local-only storage
Read before use
  • Unofficial resource: Not an FBI/CSA form and not endorsed by the FBI, CJIS Division, or any state CSA.
  • No CJI: Do not enter Criminal Justice Information (CJI) or other sensitive case data into this workbook.
  • Storage: “Save Session” uses your browser’s localStorage on this device. It is not encrypted. Don’t use on shared/public computers.
  • Authority: Your CSA/state CJIS office guidance is the authoritative source for audit requirements and interpretations.
  • Official CJIS policy reference: CJIS Security Policy v6.0 (FBI landing page)
Policy Area 1–13 Coverage
Local Agency / ORI-Level Assessment
Supports TAC / LASO pre-audit prep
Overall Status: Not started
📅 Last updated: not yet saved
1. Local Agency & Scope
Context & identifiers
Agency Name *
ORI *
CSA / State
Assessment Date
Assessor
Contact Email
Scope Notes
Helpful for documenting what is (and is not) in-scope for CJIS: CAD, RMS, NCIC/TCIC terminals, MDTs, JMS, records, etc.
Assessment Type
Adjust language in notes to match purpose (formal vs. informal).
2. Governance & Key Contacts
Policy Area 1, 2, 11, 12
TAC (Terminal Agency Coordinator)
TAC Contact
LASO (Local Agency Security Officer)
LASO Contact
IT / ISO Lead
IT / ISO Contact
TAC & LASO Appointments
Letters, emails, or orders that formally appoint TAC and LASO roles.
Local CJIS Security Policy / SOPs
View suggested governance evidence
3. CJIS Policy Areas – Assessment by Control
Policy Area 1–13
Use the controls below to track status by policy area. The main goal is to capture practical status for the local agency: how each control is implemented, any gaps, and follow-up actions.

Policy Area Summary

Assessment Snapshot & Notes

Quick metrics, risk overview, and planning notes for follow-up.

Overall Progress & Risk
Not started
Controls with any status 0 / 0
Controls flagged Non-Compliant 0
1 Identify & scope
2 Gather evidence
3 Rate controls
4 Plan remediation
CJIS Environment Summary
Optional – for context
Approximate CJIS Users
CJIS Systems in Use
High-Level Environment Notes
Key Risks & Immediate Actions
For quick triage
Immediate Risk Items (0–90 days)
Short-Term Projects (3–12 months)
Longer-Term Improvements
Assessor Notes
Assessment details
Saved