DCIN compliance for North Carolina law enforcement agencies

Personnel assigned to use a DCIN device have to be certified within 120 days of employment or assignment, and every agency's user agreement has to be signed by both the agency head and North Carolina's CJIS System Officer. Any private contractor who configures or supports a device or network touching CJI needs a written agreement incorporating the current CJIS Security Addendum - not optional, and not something a general IT services contract automatically covers.

The FBI's CJIS Audit Unit and North Carolina's SBI jointly conduct triennial audits of every agency and authorized third party, with findings graded rather than a simple pass/fail - organizations that fall short risk losing access to federal databases entirely. Underneath that, the substance is the same work every CJIS-connected agency in the country does: access control, authentication, audit logging, incident response, and the rest of CJIS v6.0's 20 policy areas. ComplianceLattice tracks that full federal baseline today.

If your agency uses an outside IT provider or MSP for anything touching CJI, confirming a signed CJIS Security Addendum exists for that specific contractor - not just a general services agreement - is worth checking before an SBI audit does. If your agency is working through DCIN requirements now, reach out - alpha tester feedback directly shapes what we build first.