News photo banner

PRESS RELEASE

DoD Approves 23 Commercial Cloud Service Offerings that Meet FedRAMP Moderate Baseline

FORT GEORGE G. MEADE, Md -- The Defense Information Systems Agency granted a Department of Defense Provisional Authorization (PA) March 26 to 23 cloud service offerings to host DoD mission data up to Impact Level 2 in a cloud environment.

A DoD PA serves as the foundation for the authorization process when using a Cloud Service Offering.   Mission Owning Authorization Officials can leverage the PA, coupling this information with their assessment of the additional controls needed for their specific  mission system/application, in determining overall mission risk before  issuing an Authority to Operate (ATO). 

DoD defines impact levels based on the sensitivity and risk associated with the data, which was used to establish the minimum protection and controls required. There are four impact levels: 2, 4, 5 and 6, with mandated protections increasing with each successive level. Impact Level 6 is for data classified as Secret.

Impact Level 2 is for Non-Controlled Unclassified Information which includes all data cleared for public release, as well as some DoD private unclassified information not designated as CUI or critical mission data, but the information requires some minimal level of access control.

These cloud service providers demonstrated compliance with the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline and each was previously granted either a FedRAMP Joint Authorization Board (JAB) Provisional Authorization (PA) or a FedRAMP Agency Authority to Operate (ATO).

"The granting of these provisional authorizations is an important step in our strategy to drive cost down by moving more of our mission data to the cloud," said Terry Halvorsen, DOD Chief Information Officer.

Cloud service offerings that were granted DoD PAs:

  1. AINS eCase. Service Model: Platform as a Service (PaaS) and Software as a Service (SaaS). FedRAMP Agency ATO by Department of Housing and Urban Development (HUD)
  2. Akamai Content Delivery Services.  Service Model: Infrastructure as a Service (IaaS). FedRAMP JAB PA
  3. Amazon Redshift. Service Model: Infrastructure as a Service (IaaS). FedRAMP Agency ATO by Department of Health and Human Services
  4. AT&T Storage as a Service (STaaS).  Service Model: Infrastructure as a Service (IaaS) . FedRAMP JAB PA
  5. Autonomic Resources Cloud Platform (ARC-P). Service Model: Infrastructure as a Service (IaaS) . FedRAMP JAB PA
  6. Clear Government Solutions FedGRID Government Community Cloud. Service Model: Infrastructure as a Service (IaaS) . FedRAMP JAB PA
  7. Concurrent Technologies Corporation Unclassified Remote Hosted Desktops (URHD). Service Model: Software as a Service (SaaS) . FedRAMP JAB PA
  8. Economic Systems Federal Human Resources Navigator (FHR Navigator).  Service Model: Software as a Service (SaaS) . FedRAMP JAB PA
  9. Edge Hosting CloudPlus – Managed Cloud for Secure Windows and Linux Application Hosting. Service Model: Platform as a Services (PaaS) and Infrastructure as a Service (IaaS). FedRAMP Agency ATO by Department of Labor
  10. IBM SmartCloud for Government. Service Model: Infrastructure as a Service (IaaS) . FedRAMP JAB PA
  11. Lockheed Martin SolaS-I Government Community Cloud. Service Model: Infrastructure as a Service (IaaS) . FedRAMP JAB PA
  12. MicroPact Product Suite. Service Model: Platform as a Service (PaaS). FedRAMP Agency ATO by Department of the Interior
  13. Microsoft Office 365 Multi-Tenant & Supporting Services Including Azure Active Directory. Service Model: Software as a Service (SaaS). FedRAMP Agency ATO by Department of Health and Human Services
  14. Microsoft Windows Azure Public Cloud Solution. Service Model: Infrastructure as a Service (IaaS) . FedRAMP JAB PA
  15. OMB MAX General Support Services. Service Model: Infrastructure as a Service (IaaS). FedRAMP Agency ATO by Office of Management and Budget (OMB)
  16. OMB MAX.gov Shared Services. Service Model: Platform as a Service (PaaS) and Software as a Service (SaaS). FedRAMP Agency ATO by Office of Management and Budget (OMB)
  17. Oracle Federal Managed Cloud Services. Service Model: Platform as a Service (PaaS) . FedRAMP JAB PA
  18. Oracle Service Cloud. Service Model: SaaS. FedRAMP JAB PA
  19. Salesforce Government Cloud. Service Model: Platform as a Service and Software as a Service (SaaS). FedRAMP Agency ATO by Department of Health and Human Services
  20. SecureKey Briidge.net ExchangeT for Connect.Gov. Service Model: Software as a Service (SaaS) . FedRAMP JAB PA
  21. US Treasury Workplace.gov Community Cloud. Service Model: PaaS, SaaS. FedRAMP Agency ATO by Department of the Treasury
  22. USDA National Information Technology Center. Service Model: Infrastructure as a Service (IaaS).  FedRAMP Agency ATO by United States Department of Agriculture
  23. Verizon Enterprise Cloud Federal Edition. Service Model: Infrastructure as a Service. FedRAMP Agency ATO by Department of Health and Human Services

More information on each offering can be found at:  https://www.fedramp.gov/marketplace/compliant-systems

A DoD PA is an initial approval of the cloud service provider’s cloud service offering package by DISA that a DoD customer or Mission Owner can leverage to grant an Authority to Operate for the acquisition and use of the cloud service offering at the defined impact level. A DoD PA does not constitute endorsement by DISA or DoD of the suitability of the cloud service offering for any particular requirement, nor does it replace or eliminate the requirement for the Mission Owner to issue an ATO for their implementation of the cloud service offering.

 

 

Posted May 4, 2015