The FBI's CJIS (Criminal Justice Information Services) Security Policy compliance requires any law enforcement agency or other government agency that has access to CJIS databases protect access to that data. There are a number of security compliance regulations listed in the CJIS Security Policy.

For example, CJIS AA (Advanced Authentication) requires multi-factor authentication (MFA) to protect access to the data on police devices. An effective way to enforce MFA is by requiring a strong password (factor one) and a physical token (factor two).