IntelliGRC Adds Support for FBI's CJIS Security Policy v6.1

IntelliGRC, a cybersecurity governance, risk, and compliance (GRC) platform, has announced its support for the FBI's Criminal Justice Information Services (CJIS) Security Policy v6.1. This update allows IntelliGRC customers to manage CJIS requirements within the same platform as their other compliance programs.

The platform, specifically designed for managed service providers (MSPs) and managed security service providers (MSSPs), enables them to offer new services to police and sheriff departments that handle criminal justice information.

The CJIS Security Policy outlines minimum security requirements for protecting Criminal Justice Information (CJI). The FBI released version 6.1 in June 2026, reorganizing the policy around NIST SP 800-53 control families. Unlike NIST SP 800-53, which allows organizations to define many parameters, CJIS prescribes specific values, such as the number of allowed failed login attempts.

IntelliGRC identifies these prescribed CJIS values and flags conflicts, providing customers with clarity on requirements and potential gaps. Furthermore, customers can reuse existing controls and assessment boundaries towards CJIS compliance through IntelliGRC's Intelligent Control Library (ICL), reducing redundant work.

Ozzie Saeed, founder and CEO of IntelliGRC, emphasized that the system provides the necessary values and recognizes prior work, enabling seamless integration of CJIS into existing programs rather than as a standalone project.