He wrote in an article published Wednesday one provision of the law requires DOD to test and evaluate the cybersecurity of commercial cloud offerings used to store classified military data.
Under Section 1553, the defense secretary must consult with the private sector to establish a new policy that would authorize independent assessments of infrastructure from cloud service providers.
Rossino said the provision may be linked to the Pentagon’s Cybersecurity Maturity Model Certification program and applied to the Joint Warfighting Cloud Capability procurement vehicle.
The analyst added that he forecasts the department will implement a cloud-based content management system through a pilotprogram mandated by Section 917 of the NDAA.
The Space Development Agency has awarded $3.5 billion in other transaction authority agreements to Lockheed Martin, L3Harris Technologies, Northrop Grumman…
The Defense Health Agency has awarded TriWest Healthcare Alliance $6.8 billion to continue providing healthcare and administrative services in support…