trade-press
CJIS 2027 deadline pushes identity past MFA
The FBI's updated CJIS Security Policy tells agencies to think about identity governance as an operational problem, not a compliance checklist, and the October 2027 deadline means the clock on that shift starts now.
The FBI's Criminal Justice Information Services Division has updated its Security Policy with an October 2027 compliance deadline, and public safety agencies are being told to move beyond multifactor authentication toward consistent identity governance, third-party access controls, and centralized accountability. The warning comes from an industry practitioner, not the Bureau itself, but the operational picture is familiar: officers accessing up to 10 systems per shift, cumbersome authentication that users circumvent, and agencies that treat compliance as a last-minute audit exercise rather than a security foundation.