pattern
CJIS Security Policy audit prep checklist
An agent turns the CJIS Security Policy into a control checklist and evidence list for your IT and TAC to work through.
- Agency or source
- Pattern (FBI CJIS Security Policy v6.0)
- Agent or tool
- General LLM on public policy text only
- Category
- Compliance
- Tags
- cjis, compliance, audit, law-enforcement, it
Free starter prompt
Reconstructed from the public description. Not the agency's own prompt.
From the CJIS Security Policy section text below, create a checklist row for each requirement: control ID, requirement in plain words, evidence an auditor would ask for, owner role (TAC, IT, vendor), and status (not started, in progress, done). Do not mark anything done. Do not include any agency system data. Section text: [paste public policy text].
The full setup, tailored to your SOPs with weekly runs and human review steps, is part of the Compliance Checklist Pack. Ask about it.
Caveats for public safety
Feed only public policy text. Never put CJI, credentials, network diagrams or audit findings into a public AI tool. Your CSA and state CJIS audit team interpret requirements, not the AI. Check for the latest policy version before each audit cycle.
Source: Pattern (FBI CJIS Security Policy v6.0), 2024-12-27. A person must review every output.