Skip Ribbon Commands Skip to main content
DoD Cloud Computing Security

This site provides a knowledge base for cloud computing security authorization processes and security requirements for use by DoD and Non-DoD Cloud Service Providers (CSPs) as well as DoD Components, their application/system owners/operators and Information owners using Cloud Service Offerings (CSOs).
Cloud Computing Security Requirements Guide (CC SRG)

DoD Cloud computing policy and the CC SRG is constantly evolving based on lessons learned with respect to the authorization of Cloud Service Offerings and their use by DoD Components. As such the CC SRG is following an "Agile Policy Development" strategy and will be updated quickly when necessary. In support of this strategy, DISA is offering a continuous public review option by accepting comments on the current version of the CC SRG at any time. Please use the comment matrix posted below. We would appreciate it if your comments are limited to critical issues and omissions or recommended coverage topics.

Submit all comment matrices and questions to disa.stig_spt@mail.mil
 

DoD Cloud Computing SRG

 
Download
Date
  
Size
  
Format
  
​Cloud Computing SRG v1r2
3/25/2016N/AOnline Version
Cloud Computing SRG v1r2
3/25/20163 MBPDF
Cloud SRG Release Memo
3/25/2016183 KBPDF
CC SRG v1r2 Revision History
3/25/2016141 KBPDF
CC SRGv1r2 Comment Matrix
3/25/201647 KBXLSX
 

DRAFT Cloud Computing Documents

 
Download
Date
  
Size
  
Format
  
DRAFT Secure Cloud Computing Architecture (SCCA) Functional Requirements (FR)
3/21/20162.1 MBZIP
SCCA FR Public Release Note
3/21/201665 KBPDF
 

DoD Cloud Computing Supplemental Guidance