Training.Certification.Validations.Audits.Governance.
Built for state CJIS Systems Agencies: distribute Security and Privacy training statewide, certify NCIC users, run monthly validations, audit your agencies, and prove your compliance to the FBI.
The job
What do CJIS Systems Agencies have to manage statewide?
A CJIS Systems Agency is responsible for CJIS within its state. Each part of that job has its own cycle, its own records, and its own way of falling behind.
01
Training, every agency
Everyone with access to criminal justice information, at every agency in the state, trained and renewed on schedule.
02
NCIC certification testing
The people who query state and national systems, certified and recertified.
03
Monthly record validation
Records confirmed every month, so what is in the system is still accurate.
04
Audits of local agencies
Local agencies and contractors audited on your cycle, with their responses and evidence collected.
05
The FBI's audit of the CSA
Your own program ready when the FBI's CJIS Audit Unit audits the state.
06
Policy, controls, and evidence
Kept current between audits, not assembled when an auditor is on the way.
Which Peak products do states run?
State CJIS Systems Agencies run Peak à la carte. Start with the products you need, then add modules as your program grows.
The industry standard for CJIS Security and Privacy training.
Affordable online training and testing that makes it simple to comply with required CJIS security and privacy training for practitioners, operators, vendors, and IT personnel.
Streamline your NCIC certification process.
The market leader in training and tracking State and NCIC certification status, with distinct workflows for Full Admin, Admin, and Assistant Admin user types.
Audit management, digitized.
A complete electronic audit platform for state and federal CSAs. CJIS audits, technical audits, and non-criminal justice agency audits, all in one place.
The first browser-based NCIC validation system.
Import the NCIC validation file and replace printing, mailing, and paper handling with a monthly cycle agencies work in the browser.
Governance, risk, and compliance in one place.
Over 20 pre-written policy templates mapped to CJIS and NIST controls, a risk assessment wizard, and evidence stored against the control it satisfies. An Auditor role is built for external audits by the FBI.
What else can a state add?
Governance, custom training, and cyber readiness, added as your program grows.
Turns CJIS Online into a full learning management system. Upload your own courses, video series, and quizzes alongside standard CJIS content, and assign them to your whole organization, to specific organization units, or to named people.
Explore Peak Training Extension →Eight specialized security courses covering ground that required CJIS training does not. Run them always-on across your workforce, or provision them per incident.
Explore Cyber & IR Training →Extend the products you already run. Each module activates inside your existing platform.
Agency Relationship Management. Targeted messaging, task tracking, and custom agency and user classifications, plus two custom state certifications that auto-assign based on those classifications.
Explore ARM →Agencies upload audit evidence directly through a secure portal. Submissions are time-stamped and automatically linked to the audit, agency, and requirement, which ends the email chains.
Explore Audit Docs →LASO designation, certification testing, compliance tracking, and reporting.
Explore Security Roles →API access and single sign-on. Automates user provisioning, integrates certification data into your systems of record, and adds bulk certificate download.
Explore CJO Access →Ready to see it work for your program?
Tell us how your state runs training, testing, validations, and audits today. We will walk you through how Peak handles each one.
More questions about running CJIS statewide? See the FAQ →