Given the importance of the CJIS Security Policy in addressing cybersecurity faced by the criminal justice communtiy, this presentation highlights recent updates to the policy and their impact to law enforcement agencies. This presentation will address the recent transition from a check-list compliance model to a more dynamic approach centered on continuous risk management.