FBI CJIS Security Policy SI-4(4): System Monitoring | Inbound and Outbound Communications Traffic

What does SI-4(4) require?

Set criteria for unusual or unauthorised inbound and outbound traffic and monitor it continuously for conditions such as malicious code, unauthorised use of legitimate code or credentials, signalling to external systems and the unauthorised export of information.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in SI: System and Information Integrity – FBI CJIS Security Policy

SI-1 SI-1 Policy and Procedures
SI-10 SI-10 Information Input Validation
SI-11 SI-11 Error Handling
SI-12 SI-12 Information Management and Retention
SI-12(1) SI-12(1) Information Management and Retention | Limit Personally Identifiable Information Elements
SI-12(2) SI-12(2) Information Management and Retention | Minimize Personally Identifiable Information in Testing, Training, and Research
SI-12(3) SI-12(3) Information Management and Retention | Information Disposal
SI-16 SI-16 Memory Protection

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All FBI CJIS Security Policy controls