DSM and its employees have signed the FBI's CJIS Security Addendum. By doing so, DSM agrees to comply to all CJIS security policies, including how we handle CJIS data, and that fingerprint-based background checks are performed on all personnel with logical and/or physical access to CJI.
DSM has assessed the operational policies and procedures of our offerings including: DRaaS, DPaaS, Hybrid Cloud, Private Cloud, Public Cloud (in Azure Gov), and VPC. and will attest in the applicable service agreements to their ability to meet FDLE requirements for the use of in-scope services. This enables law enforcement and criminal justice management entities to implement cloud-based solutions and comply with CJIS Security Policy V5.8.
As of 2019, DSM has a signed memorandum of understanding (MOU) with HSMV-FHP, providing Leading Agency Sponsorship for DSM. This agreement allows law enforcement and criminal justice management entities to sign an inter-agency agreement with HSMV instead of having to vet DSM's facilities and personnel directly. This process has already been completed and is maintain by HSMV.
The Criminal Justice Information Services (CJIS) Division of the US Federal Bureau of Investigation (FBI) gives state, local, and federal law enforcement and criminal justice agencies access to criminal justice information (CJI) such as, fingerprint records and criminal histories. Law enforcement and other government agencies in the United States must ensure that their use of cloud services for the transmission, storage, or processing of CJI complies with the CJIS Security Policy, which establishes minimum security requirements and controls to safeguard CJI.
In addition, all private contractors who process CJI must sign the CJIS Security Addendum, a uniform agreement approved by the US Attorney General that helps ensure the security and confidentiality of CJI required by the Security Policy. It also commits the contractor to maintaining a security program consistent with federal and state laws, regulations and standards, and limits the use of CJI to the purposes for which a government agency provided it.
Safe Secure and Compliant Data Centers
DSM’s staff and data
