DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3
Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 5.10.4: IP addressing and DNS: DoD address space via the BCAP, no Internet reachability of NIPRNet-only services, .mil records in DoD DNS with DNSSEC

What does 5.10.4 require?

Mission systems in Level 4 and 5 CSOs use DoD NIPRNet IP address space interfaced through the BCAP by preference; use of CSP commercial addresses requires a risk assessment of non-DoD addressing and conditions on the PA, with routes aggregated to /24 or larger, minimal changes, services reachable from NIPRNet not also advertised to or reachable from the Internet, and extra measures where the CSO shares addresses with non-DoD customers; SIPRNet and NIPRNet address space is used only on the matching network. .mil DNS records are hosted in the DoD .mil DNS infrastructure, DoD DNS protective services are used, and any CSP DNS services are protected by a DNS proxy and support DNSSEC.

Maintained by Gerard Blokdyk

Other controls in Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 controls