DFARS 252.204-7012 - Safeguarding Covered Defense Information
DFARS 7012: Adequate Security

DFARS 252.204-7012 - Safeguarding Covered Defense Information DFARS-7012-b-cloud: Cloud and external service provider security

Cloud computing services provided as part of an IT service operated on behalf of the Government are subject to clause 252.239-7010; where the Contractor uses an external cloud service provider to store, process or transmit covered defense information, the Contractor shall require the provider to meet security requirements equivalent to the FedRAMP Moderate baseline and to comply with paragraphs (c) through (g) of this clause.

Other controls in DFARS 7012: Adequate Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.