CJIS, IRS Publication 1075, and CIS Controls.
Departments handling criminal justice information, federal tax information, or Payment Card Industry data carry specific technical and administrative requirements that do not go away because a city is small. We implement access controls, logging and audit trails, encryption in transit and at rest, and personnel security controls aligned to CJIS and IRS 1075 where applicable, with CIS Controls used as the general-purpose baseline for the broader environment.
