Cloud Security Project
Background: As more government information system are migrated – or being prepared to migrate – to a cloud hosting model, Federal CISOs are faced with the challenge of identifying, mitigating risk and managing risk to these systems in a new operational environment.
There is a need to collect best practices, lessons learned and additional guidance, gleaned from both agency and industry SMEs, for cloud security requirements and managing cloud operations.
This will be a cross-collaboration project with Cybersecurity COI.
Project Overview: ACT-IAC’s Cloud Working Group and Cybersecurity COI have undertaken a project to support a common initiative on cloud security requirements and best practices in managing cloud operations. Focus will be on (1) cloud optimized CDM, (2) identity and access management, and (3) trusted cloud connectivity (TCC).
Overall Project Objective: The purpose of this project is to support the initiative to modernize government by providing guidance to the CISO community based on the best thinking and lessons learned from surveys and case studies.
Group Project Deliverables
|Deliverable Name||Deliveable Type||Expected/Actual Deliverable Completion|
|Playbook with use cases and best practices||White Paper||July 2018|