05_RFP-DA-IT01_AppxA_ExhH1-CJIS_Security_Addendum.pdf

This is a CJIS Security Addendum document for the Los Angeles County District Attorney's Office (LADA) supporting a Request for Proposals (RFP) for a Case Management System (CMS) Solution. The addendum establishes security requirements and compliance obligations that proposers must meet when providing a cloud-based, fully integrated CMS platform designed to replace legacy applications and manage the complete criminal case lifecycle from investigation through post-conviction. The solution must support enterprise-level case management, integrate seamlessly with partner justice agencies and court systems, and comply with Criminal Justice Information System (CJIS) security standards as a mandatory requirement for system implementation and operation.

The CJIS Security Addendum specifies that vendors must adhere to FBI CJIS Security Policy requirements governing the protection of criminal justice information, including data classification, access controls, audit logging, encryption, personnel security, and system security protocols. Proposers must demonstrate their infrastructure's ability to implement and maintain CJIS-compliant security measures, conduct required security assessments, and maintain ongoing compliance throughout the contract term. The document establishes that any cloud-based solution must incorporate appropriate safeguards for sensitive criminal justice data, with vendors bearing responsibility for ensuring their systems, personnel, and operations meet or exceed all applicable CJIS standards. Compliance with these security requirements is a non-negotiable condition of contract award and continued performance.