Service Provider Package for Moderate Impact with CJIS Overlay

The Service Provider Package for Moderate Impact with CJIS Overlay includes the templates, guidance, and documentation requirements used by cloud service providers seeking GovRAMP security status at the Moderate Impact level while supporting criminal justice information (CJI). In addition to standard Moderate Impact security expectations, this package incorporates CJIS-aligned requirements to help providers demonstrate how their systems protect sensitive law enforcement data. Organizations use these resources to prepare consistent documentation, understand additional safeguards tied to CJIS environments, and clearly show how their security practices meet both GovRAMP and CJIS-aligned expectations.