DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 6.1-4: Cyberspace defence roles: boundary defence by DISA, mission defence by the mission owner's CSSP, CSP cooperation with DoD defenders

What does 6.1-4 require?

Cyberspace defence of cloud-hosted missions is split between boundary cyberspace defence actions performed at the CAPs and DISN boundary by DISA and JFHQ-DoDIN, and mission cyberspace defence actions performed for each mission system by an accredited cybersecurity service provider the mission owner aligns with (or the mission owner itself where accredited); the CSP defends its own infrastructure, follows the SRG's requirements when integrating with the DoD organisations performing these actions, and mission owners write those requirements into the contract. Roles and responsibilities by impact level and service model are set in Table 6.4, with emphasis on integrity and availability where the CSP holds confidentiality responsibility.