DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 5.6.1: Facilities: FedRAMP Moderate physical security at Level 2, plus FedRAMP+ physical controls at Levels 4 and 5, cleared secure facilities at Level 6

What does 5.6.1 require?

Data centres that process Level 2 information meet the FedRAMP Moderate physical security controls; those hosting Level 4 or 5 offerings also meet the FedRAMP+ physical security controls; and on-premises or classified facilities supporting Level 6 are secure facilities cleared under the National Industrial Security Program (DoD 5220.22-M) or DoD facility requirements, with access limited to authorised individuals, all access logged with identities, and escorts provided and logged where applicable.