top of page
Learn More
THE PROBLEM
Why CJIS Compliance Stalls Before it Starts.
The FBI CJIS Security Policy is more than 400 pages of controls, cross-references, and requirements — and nobody hands you a map. You’re expected to read it, interpret it, document it, and then defend all of it in an audit, usually with no dedicated compliance staff and no template to build from.
So most agencies and vendors do the same thing: they stall. They put off the policies they’re unsure how to write, guess at what an assessor actually wants, and hope the gaps don’t surface at the worst possible moment — during a finding.
Compliance rarely fails because people don’t care. It fails because they’re starting from a blank page, rebuilding work that thousands of agencies before them have already had to figure out. The CJIS Jumpstart hands you that work, done right — so you can stop staring and start moving.
Get the CJIS Jumpstart Bundle™ — FREE.
The CJIS Jumpstart Bundle isn’t theory. It’s fifteen of the exact assets used to build real CJIS programs: the documents you’ll actually file, the audio classes that make the policy make sense, and the checks that tell you where you truly stand. Everything below is complete, usable, and yours to keep.
WHAT'S INSIDE — ALL 15, FREE
Fifteen Assets. Three Pillars. One Running Start. All Completely FREE!
Complete samples pulled straight from the full CJIS Academy membership — the same artifacts used to build world-class CJIS programs.
CJIS Toolkits & Templates
CJIS Access Control Matrix (sample)
01.
Maps exactly who can touch CJI, through which systems, at which layer. It turns the most-audited question in CJIS — “who has access, and how do you control it?” — into a document you can hand across the table.
Contingency Plan (sample)
03.
A ready-to-adapt continuity and recovery plan for your CJI assets. It’s the documentation agencies most often get caught without — and exactly what an assessor will ask to see.
Event Monitoring & Logging Matrix (sample)
05.
Lays out what to log, where, and how long to keep it. Audit logs are the evidence trail an assessor traces first — this is how you make sure yours are actually there.
Mobile Device Security Policy (sample)
07.
Covers the Policy Area 20 requirements for the phones, tablets, and laptops that touch CJI — one of the most common gaps in an otherwise solid program.
SSP Starter Template (Policy Areas 1–3)
02.
The opening sections of a System Security Plan, formatted the FedRAMP-style way assessors expect. You fill in your environment instead of inventing the structure — saving days of formatting and second-guessing.
Compliance Matrix — sample tab
04.
A single view that shows, control by control, whether you’re covered, partially covered, or exposed. Use it to find your gaps before an auditor does.
Incident Response Plan — Starter Template
06.
The plan you’re required to have before an incident, not after. A ready structure for detection, reporting, and recovery you can adapt to your agency in an afternoon.
Choose Your Track
CJIS Decoded Audio Masterclasses
“What Criminal Justice Information Actually Is”
08.
Settles the single most misunderstood question in CJIS: what counts as CJI, what doesn’t, and where PII fits. Get this wrong and you either over-scope and drown, or under-scope and fail.
“Advanced Authentication: What v6.0 Requires”
10.
The MFA mandate in plain English: what’s required, who it applies to, and the mistakes that turn a simple requirement into a finding.
“What Non-Compliance Actually Costs”
09.
The real consequences — financial, operational, and political — of a failed audit or a data-misuse finding, from someone who’s sat on both sides of the table. This is the class that gets leadership to fund the work.
“Who Owns CJIS Inside Your Agency”
11.
The governance chain — CSA, CSO, TAC, and LASO — explained so you know exactly who is accountable for what. Unclear ownership is where compliance quietly falls apart.
CJIS Support Library Assets
Who Actually Has to Be CJIS ComplianT?
12.
A plain-English explainer that answers the question every agency and vendor gets wrong — and shows you whether, and how, the policy applies to you.
CJIS Audit-Prep Checklist
14.
The concrete list of what to have ready before an assessment, so you walk in prepared instead of hopeful.
The 20-Minute CJIS Readiness Self-Check
13.
A short, honest self-assessment that tells you where you stand right now — so you know exactly what to fix first.
The CJIS One-Pager for Leadership
15.
A single-page brief that tells your chief or director what CJIS demands and why it matters — the fastest way to turn leadership into a backer instead of a bottleneck.
WHAT YOU WALK AWAY WITH:
The CJIS Jumpstart Bundle™ is designed to replace uncertainty with direction.
Instead of wondering what applies, what’s missing, or where to begin, you’ll come away with practical resources, greater visibility into your CJIS readiness, and a focused set of next steps for moving your compliance program forward.
By the Time You’ve Worked Through it, You’ll Have:
Clarity on Scope: You’ll know exactly what CJI you hold and what the policy requires of you.
Real Documents, Not Blank Pages: Audit-ready templates you can adapt in an afternoon.
An Honest Read on Readiness: A clear picture of where you’re covered and where you’re exposed.
The Language to Get Buy-in: The plain-English case that gets leadership to fund the work.
A Prioritized Starting Point: You’ll know the first three things to do Monday morning.
WHO IT’S FOR
Criminal justice agencies (CJAs), non-criminal justice agencies (NCJAs), interface agencies, and any private-sector vendor that accesses or supports CJI. If CJIS applies to you — or you’re not sure whether it does — this is where you start.
Charles Denyer is widely regarded as America’s leading authority on the FBI CJIS Security Policy.
He advises the agencies and the vendors, trains the practitioners who live by the policy, and has sat on both sides of the audit table. With 25 + years across DoD, the intelligence community, NIST, FISMA, and FedRAMP, he built CJIS Academy to make compliance something an organization can actually understand, document, and defend — without a six-figure consulting bill just to get in the door.
WHO’S BEHIND IT
Created by Charles Denyer
CJIS Toolkits and Templates
CJIS Support Library
CJIS Academy Consulting Services
CJIS Toolkits and Templates
1/3
The Bundle Gets You Started.
Membership Gives You the CJIS VAULT.
™
The full CJIS Academy membership means you get access to the CJIS VAULT - the complete, always-current library agencies and vendors use to run their entire CJIS program — updated as the policy moves to v6.0 + and beyond:
200 + tools
& templates
Matrices, policies, plans, and SSPs across all 20 policy areas.
70 + CJIS Decoded audio classes
Every major issue in the policy, for both agencies and vendors.
Massive Repository of documents
Forms, registers, checklists, self-assessments, explainers, and more.
Annual All-Access membership · [set pricing]
QUESTIONS, ANSWERED
Everything You Need to Know Before You Download.
Is it Really Free?
Yes. You give us an email, we send the kit. No credit card, no account, no catch.
Do I have to create an account?
No. The bundle is delivered straight to your inbox. Accounts exist only for annual members.
Who is this for?
CJAs, NCJAs, interface agencies, and any vendor that accesses or supports CJI.
What happens after I download it?
You’ll get the bundle, plus a short series of emails showing how to put it to work. Unsubscribe anytime.
Is CJIS Academy affiliated with the FBI?
No. It’s an independent resource reflecting Charles Denyer’s interpretation of the published policy and his expertise on all things CJIS.
bottom of page