DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3
Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 5.2.3: DoD owns all DoD data in the CSO, including logs; the CSP may not use it

What does 5.2.3 require?

Every piece of information DoD users put into or generate in a CSO, including logs and monitoring data from mission systems and the logs the CSP creates about the mission owner's use and management of the CSO, is owned by DoD, the mission owner or the information owner unless the contract says otherwise; the CSP has no rights in it and may not use DoD data for its own purposes. A CSP seeking a PA accepts DoD's continuing ownership of everything DoD stores there, and the contract must reflect this.

Maintained by Gerard Blokdyk

Other controls in Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.