3PAO Package for Moderate Impact with CJIS Overlay

This package includes required templates and sample policies for every NIST 800-53 control family, along with templates for Rules of Behavior, Incident Response Plan, Configuration Management Plan, Information System Contingency Plan, and Supply Chain Risk Management.

Moderate Impact Service Provider Package with CJIS Overlay

This package offers service providers the documentation, policies, procedures, and resources required to meet GovRAMP security requirements for systems processing, storing, or transmitting moderate-impact government data with additional compliance considerations aligned to the FBI’s Criminal Justice Information Services (CJIS) Security Policy.