[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvBk3yi57F2_H6HJE8t4pYoXNseZG_DisTu0PkD-XJ60":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"d9b92925-a60c-404c-9dc8-f42151ddeacf","FBI's CJIS v6.1: What Security Teams Need to Know.","fbi-s-cjis-v6-1-what-security-teams-need-to-know-352d6a","The FBI's CJIS Security Policy v6.1 strengthens requirements around encryption and vulnerability scanning while continuing the shift toward more continuous security assessment. Specops explains what changed and how agencies can address password, MFA, and identity requirements as they prepare for upcoming audits. [...]","The FBI's CJIS Security Policy v6.1 has been released, refining version 6.0 with updated requirements for encryption strength (256-bit for data in transit and at rest) and increasing vulnerability scanning frequency to monthly. Agencies are advised to align with these changes, as audit requirements are shifting towards continuous assessment, with some controls already sanctionable and others phased in until late 2027.","FBI's CJIS Security Policy v6.1 strengthens encryption and vulnerability scanning requirements.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Ffbis-cjis-v61-what-security-teams-need-to-know\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fposts\u002F2026\u002F09\u002F14\u002Fspecops-legal-doc.jpg","2026-09-21T14:02:12+00:00","2026-09-21T16:00:57.376711+00:00",7,[17,20,23],{"name":18,"type":19},"NIST SP 800-53","technology",{"name":21,"type":22},"Specops Password Policy","product",{"name":24,"type":25},"Specops Software","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":26,"icon":28,"name":29,"slug":30},null,"Policy","policy",[32,37,42,44],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"217d3263-c763-41ca-875e-06901f522fe0","NIST","nist",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":43},{"id":26,"icon":28,"name":29,"slug":30},{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[24,21],{"controls":52,"vendors":137},[53,82,111],{"slug":54,"name":55,"problem":56,"products":57},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":83,"name":84,"problem":85,"products":86},"patch-management","Automated patch management","Known holes get closed in days, not months.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":112,"name":113,"problem":114,"products":115},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[116,124,129],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":125,"product_name":126,"url":127,"description":128},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",[],{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":152},"fbi-cjis-v61-raises-the-bar-on-encryption-and-vulnerability-scanning","FBI CJIS v6.1 Raises the Bar on Encryption and Vulnerability Scanning","The FBI's updated CJIS Security Policy v6.1 introduces stricter requirements for encryption (256-bit for data in transit and at rest) and mandates monthly vulnerability scanning — a significant increase in frequency from prior guidance. Agencies that fail to align with these updated controls risk sanctions, as some requirements are already enforceable while others phase in through late 2027. This matters because criminal justice information is highly sensitive, and outdated encryption or infrequent scanning creates exploitable windows for threat actors. The shift toward continuous assessment signals that point-in-time audits are no longer sufficient for protecting this class of data. Organizations must treat compliance not as a checkbox exercise but as an ongoing operational discipline.",[143,144,145,146,147,148,149,150,151],"CJIS Security Policy v6.1 — Section 5.10 (Encryption)","CJIS Security Policy v6.1 — Section 5.3 (Vulnerability Management)","NIST SP 800-53 Rev 5 — RA-5 (Vulnerability Monitoring and Scanning)","NIST SP 800-53 Rev 5 — SC-28 (Protection of Information at Rest)","NIST SP 800-53 Rev 5 — SC-8 (Transmission Confidentiality and Integrity)","CIS Control 7 — Continuous Vulnerability Management","CIS Control 3 — Data Protection","NIST CSF 2.0 — GV.OC (Organizational Context \u002F Compliance Obligations)","NIST SP 800-111 — Guide to Storage Encryption Technologies",{}]