GoKawiilCJIS v6.1 update sharpens focus on MFA and password security for law enforcement IT
A security advisory outlines five priority areas agencies must address to comply with CJIS v6.1, the FBI's data security policy for handling Criminal Justice Information. Among the top priorities is multi-factor authentication, now required for both privileged and non-privileged accounts under controls IA-2(1) and IA-2(2), covering local, network and remote access. The guidance also points to tools like Specops Secure Access and Specops Password Policy as options for extending MFA coverage and blocking compromised passwords.