VCIN compliance for Virginia law enforcement agencies
Virginia agencies accessing criminal justice information answer to the FBI's CJIS Security Policy v6.0 and VCIN - the Virginia Criminal Information Network - whose membership is defined directly in state law rather than administrative policy alone. ComplianceLattice tracks the federal foundation both share.
A federal baseline, defined in state law
VCIN membership is regulated by Title 52, Chapter 2 of the Code of Virginia, and every agency connecting has to meet the statutory definition of a criminal justice agency under §9.1-101 - a legal threshold, not just an administrative sign-up. Personnel must attend the VCIN/NCIC Certification Course and produce Virginia State Police-approved documentation of completion, and any vendor or system connected to VCIN has to independently meet CJIS security requirements.
Underneath that statutory framing, the substance is the same work every CJIS-connected agency in the country does - access control, authentication, audit logging, incident response, and the rest of CJIS v6.0's 20 policy areas. ComplianceLattice tracks that full federal baseline today, covering most of the ground before you get to VCIN's certification-specific requirements.
Because VCIN eligibility is a statutory question, not just an administrative one, an agency whose status is ambiguous - a specialized unit, a multi-jurisdictional task force - is worth confirming against the Code of Virginia definition directly rather than assuming eligibility. If your agency is working through VCIN requirements now, reach out - alpha tester feedback directly shapes what we build first.
- All 20 CJIS v6.0 policy areas, the federal baseline VCIN builds on
- Evidence vault with expiration tracking for background checks and training renewals
- Certification-course completion tracking for VCIN/NCIC requirements
- One-click audit export for your State Police or FBI assessor