He wrote in an article published Wednesday one provision of the law requires DOD to test and evaluate the cybersecurity of commercial cloud offerings used to store classified military data.
Under Section 1553, the defense secretary must consult with the private sector to establish a new policy that would authorize independent assessments of infrastructure from cloud service providers.
Rossino said the provision may be linked to the Pentagon’s Cybersecurity Maturity Model Certification program and applied to the Joint Warfighting Cloud Capability procurement vehicle.
The analyst added that he forecasts the department will implement a cloud-based content management system through a pilotprogram mandated by Section 917 of the NDAA.
Space Force awards Northrop $398M SATCOM satellite prototype contract The program aims to strengthen communications in contested environments The award…