DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 5.7: Data spill handling: report, remediate across all copies, cryptographic erase or prescribed sanitisation

What does 5.7 require?

When classified or higher-sensitivity data lands in a CSO not authorised for it, the mission owner reports through its normal channels and the CSP reports the spill to the mission owner and DoD and remediates: remediation extends to every storage location the spilled data may have migrated to, including backups and mirrored storage, and spilled data stored unencrypted is sanitised to DoD standards or, where encryption at rest with DoD-controlled keys is used, by cryptographic erase; mission owners without encryption at rest create a remediation plan with the CSP, and for SaaS and PaaS the CSP provides the capabilities within the CSO to remediate. CSPs provide a spillage remediation plan addressing these points and the mission owner's control over it.