Policy Area 1: Information Exchange Agreements – FBI CJIS Security Policy
FBI CJIS Security Policy 5.1.2.1: 5.1.2.1 Managing Changes to Service Providers
Any change to the services a service provider delivers, whether provision, change to existing services or new services, is managed by the CJA, authorized agency or FBI, with the risk to the agency evaluated on the criticality of the data and system and the impact of the change.