Criminal Justice Agencies

Every agency with direct access to CJIS Systems will undergo a triennial audit to ensure compliance with the FBI Criminal Justice Information Services Security Policy, along with Michigan policy and law. 

Audits are conducted and processed via the Peak Performance CJIS Audit program. Your area auditor will assist you with getting set up with the program and aid you through the entire process. Contact information for the auditors can be found here:

Auditor Map and Contact Information

Written Policies Required by the FBI CJIS Security Policy

Sample Incident Response Plan (IR) Policy

Sample Security Awareness and Training (AT) Policy

Sample Auditing and Accountability (AU) Policy

Sample Media Protection (MP) Policy

Sample Access Control (AC) Policy

Sample Personnel Security (5.12) Policy

Sample_Physical_And_Environmental_Protection (PE)_Policy

Sample Identification Authentication (IA) Policy

Sample Configuration Management (CM) Policy

Sample Systems and Communications Protection (SC) Policy

Sample System and Information Integrity (SI) Policy

Sample Maintenance (MA) Policy

Sample Planning (PL) Policy 

Sample Contingency (CP) Policy

Sample Risk Assessment (RA) Policy

Other Sample Policies/Agreements and Resources

FBI CJIS Security Policy (Link)

Fire Department Agreement

Rules of Behavior

Sample Acceptable Use Policy

Sample Background Authorization Request Form

Sample Hit Confirmation Agreement

Sample Holder of the Record Agreement

Sample Management Control Agreement

Sample Non-Disclosure and Confidentiality Agreement

Sample Optional Security Awareness Form

School Agreement

Subjects with unescorted access to criminal justice information (CJI) must undergo a fingerprint-based background check to confirm eligibility. This is not only limited to your agency personnel; it also includes cleaning staff, IT staff/vendors, and anyone who shares your facility with the ability to see and/or hear CJI. 

Contact Emails for Background Checks

For State of Michigan Personnel and Contractors: MSP-Backgrounds@michigan.gov

For vendors: MSP-VendorBackground@michigan.gov

Statewide Vendor List

The Michigan State Police maintains the Statewide Vendor List, facilitating fingerprints and background checks for personnel of vendors utilized by two or more agencies. This alleviates the need for duplicated background checks and provides instant access to the records. Any vendor servicing two or more agencies within the state are eligible for the list and must be sponsored by one of their agencies.

For assistance with the list, please contact MSP-VendorBackground@michigan.gov

Forms for Requesting Background Checks

Background Request for State of Michigan, Contractors and Vendor Personnel

• CJIS-008

Background Request for Information Technology Vendor Personnel

• CJIS-008a
  
  

Security Awareness Training (SAT) is now maintained within CJIS Online. This program simplifies the maintenance of users and training records for agency administrators, retaining everything in one place. Notifications are sent at regular intervals when training is set to expire, advising the administrator and the user both to ensure the training is completed before expiration. 

As of January 1, 2025, all SAT conducted within MI-Train is expired.

At this time, the requirement for Local Agency Security Officer (LASO) training is met with the highest level of SAT, the Security Role. Your agency administrator can set your access level, which will meet the requirement of LASO.

For user agencies needing assistance with CJIS Online, please contact MSP-CJIS-SAT@michigan.gov.

Michigan State Police employees and contractors needing assistance with CJIS Online, please contact MSP-CJISOnline@michigan.gov.

Misuse of CJIS data is required to be reported to the CJIS Compliance Unit.

There is no official form for reporting misuse. Please contact MSP-LEINComplaints@michigan.gov to begin the reporting process.

Violations of MCL 28.214 are required to be reviewed by a prosecuting attorney for a decision about charges. Personal use and unlawful dissemination, whether intentional or unintentional, will need a written decision submitted to the CJIS Compliance Unit. Further, any misuse of Michigan Secretary of State (SOS) information will be reported for additional investigation and possible sanctions by SOS. 

Digital and physical incidents that significantly endanger the security or integrity of CJIS data must be reported to the Michigan State Police Information Security Officer immediately at MSP-CJIS-ISO@michigan.gov on this form.

For assistance with LEIN (help with entries, removals, programming issues, general questions) please contact LEIN Field Services at 517-241-0667 or at MSPLEINFSS@michigan.gov

Please visit the LEIN Field Services website to obtain resources, sample documents, and training information.