DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3
Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 5.10.3: Service architecture: CSP-provided defence in depth for IaaS and PaaS, SaaS assessed as a whole, disaster recovery replication over private or IPsec-protected paths

What does 5.10.3 require?

IaaS and PaaS offerings support the defence-in-depth measures mission owners must implement for the systems they build (firewalls, sensors, STIGed images), with a clear split of security responsibility between CSP and mission owner documented in the PA and the mission owner assessing the mitigations it inherits; SaaS offerings are assessed end to end for defence in depth including the application tiers. Disaster recovery and continuity of operations replication between CSP facilities travels over the CSP's private internal network or, where it crosses the Internet, is encrypted end to end with IPsec, and Level 4 and 5 separation is preserved at the DR site.

Maintained by Gerard Blokdyk

Other controls in Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 controls