NIST SP 800-146 NISTSP146-5: Deployment Model Recommendations (Public, Private, Community, Hybrid)

Apply NIST SP 800-146 Chapter 8 deployment model operational recommendations. For Public Cloud (Section 8.1): assess provider transparency, security architecture, tenancy isolation, breach history, jurisdiction of operation. For Private Cloud (Section 8.2): assess capital cost, operational maturity of internal IT, automation tooling parity with public providers. For Community Cloud (Section 8.3): assess community membership criteria, shared governance model, and equitable cost-sharing. For Hybrid Cloud (Section 8.4): assess interconnect (dedicated, VPN, internet), data flow governance between private and public components, identity federation across boundaries, and consistent policy enforcement. Maintain explicit operational recommendations per deployment model and reference them when a workload is classified.