DISA Releases New Cloud Computing Security Requirements Document

摘要

The Defense Information Systems Agency released new guidance laying out security requirements for the Pentagon's use of cloud-based solutions up to the secret level. Released Tuesday, Version 1 of the Defense Department's Cloud Computing Security Requirements Guide "defines the policies, requirements and architectures for the use and implementation of commercial cloud services by DOD mission owners," according to the document. The guidance comes shortly after the Pentagon's acting chief information officer, Terry Halvorsen, in a Dec. 15 memo, gave DOD components the ability to directly acquire cloud services instead of having to procure them through DISA. The new document provides security guidance to non-DOD owned and operated cloud service providers who want their services included in the department's cloud service catalog. The guidance also establishes a "basis on which DOD will assess the security posture" of these providers.