The Defense Information Systems Agency (DISA) released new cloud security guidance Tuesday, effectively codifying how Defense Department agencies will use commercial cloud products.
Download: Cloud Computing Security Requirements Guide
The new guidelines — a response to a policy released by DoD Office of the CIO in December — specify what can be placed in public clouds, what needs to be contained within a virtual environment and what data must be kept on physically separate networks. The highest level deals with national security systems, which will remain on restricted DoD networks, separate from the cloud until further notice.
Report: What’s next in DoD Cloud
The base level allows agencies to put information on public clouds that are either openly viewable or discoverable through FOIA.
