FBI CJIS Security Policy SI-7: Software, Firmware, and Information Integrity

What does SI-7 require?

Employ integrity verification tools to detect unauthorised changes to software, firmware and systems that hold or process CJI, and when changes are detected notify the personnel responsible for integrity and apply incident response procedures as appropriate.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in SI: System and Information Integrity – FBI CJIS Security Policy

SI-1 SI-1 Policy and Procedures
SI-10 SI-10 Information Input Validation
SI-11 SI-11 Error Handling
SI-12 SI-12 Information Management and Retention
SI-12(1) SI-12(1) Information Management and Retention | Limit Personally Identifiable Information Elements
SI-12(2) SI-12(2) Information Management and Retention | Minimize Personally Identifiable Information in Testing, Training, and Research
SI-12(3) SI-12(3) Information Management and Retention | Information Disposal
SI-16 SI-16 Memory Protection

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All FBI CJIS Security Policy controls