DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3
Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 5.8: Off-boarding: return all mission data and audit logs in a usable format, then cryptographically erase and certify destruction

What does 5.8 require?

Mission owners prepare from the start for eventual off-boarding to a new CSO or back to DoD, and CSPs support it: mission owners must be able to receive all their data from the CSO at any time in a usable, agreed format, with all audit logs relevant to their use of the CSO made available; data encrypted at rest is cryptographically erased by the departing mission owner and backups and replicas held by the CSP are erased too; after verified transfer the CSP destroys any remaining DoD data and certifies destruction, with the contract and SLA setting the terms.

Maintained by Gerard Blokdyk

Other controls in Section 5: Security requirements on cloud service providers and mission owners – DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 controls