Is ServiceNow CJIS compliant? I'm particularly concerned with Remote control to a customer that has this requiremetn of us.

[David Al-Ashari]

Is ServiceNow CJIS compliant? I'm particularly concerned with Remote control to a customer that has this requirement of us.

[Jeff Currier]

ServiceNow would typically not be able to get this type of certification as it depends on the implementation, its controls and the data captured within ServiceNow.  Typically this type of information would not reside within ServiceNow.  If data of this type were to be Stored in ServiceNow, you would want to ensure it is properly encrypted in order to you your implementation CJIS compliant.

Unsure what you mean by remote control.  If you mean managing a customer of yours where you are managing their ServiceNow instance, then this would go back to the data within the ServiceNow instance itself.

[AamirM]

I need some information regarding CJIS compliance. As we need to implement ServiceNow in court IT system and they have requirement for CJIS compliance. So, If ServiceNow does not have CJIS compliance we cannot implement. So please let me know what can be done. 

Thanks

[Simon Hendery]

Hi @AamirM - as per @Jeff Currier's response, it's not a case of ServiceNow having or not having CJIS compliance. Rather, the way you implement ServiceNow for your customer will determine whether or not their solution is CJIS compliant. I suggest you discuss this with someone in your organisation who understands Governance Risk & Compliance (GRC) frameworks. They will be able to explain why you and/or your client are asking the wrong question.

[Jeff Currier]

@AamirM Also, if you request CORE access via the ServiceNow support site, this will grant you access to compliance documents including a document with the recommendations on how to configure your ServiceNow implementation to be CJIS compliant.