CJIS Security Policy requirements vary by the type of agency and level of access to criminal justice information.