Converge Digest

DISA Approves 23 Commercial Cloud Services

The Defense Information Systems Agency has approved 23 cloud services to host Department of Defense (DoD) mission data up to Impact Level 2 in a cloud environment.

DoD defines impact levels based on the sensitivity and risk associated with the data, which was used to establish the minimum protection and controls required. There are four impact levels: 2, 4, 5 and 6, with mandated protections increasing with each successive level. Impact Level 6 is for data classified as Secret.

Impact Level 2 is for Non-Controlled Unclassified Information which includes all data cleared for public release, as well as some DoD private unclassified information not designated as CUI or critical mission data, but the information requires some minimal level of access control.

Cloud service offerings that were granted DoD PAs:

http://www.disa.mil/News/PressResources/2015/Commercial-Cloud-Service

https://www.fedramp.gov/marketplace/compliant-systems

Exit mobile version