← Back to Cloud Computing Mission Owner Operating System Security Requirements Guide

V-259878

CAT II (Medium)

For Impact Level 6, the Mission Owner must process connection approval to the SIPRNet through the DISA classified connection approval process.

Rule ID

SV-259878r958804_rule

STIG

Cloud Computing Mission Owner Operating System Security Requirements Guide

Version

V1R3

CCIs

CCI-001764

Discussion

The DOD Mission Owner systems/applications instantiated in these Impact Level 6 CSO enclaves will be assessed and authorized in the same way as any other DOD SIPRNet enclave connection in accordance with the DISA CPG. Approval for connection to the SIPRNet will be processed through the DISA classified connection approval process as with any other SIPRNet enclave.

Check Content

If this is not Impact Level 6, this is not applicable.

Verify with the site personnel that the CSO is registered in SNAP.

If the Mission Owner does not process connection approval to the SIPRNet through the DISA classified connection approval process. this is a finding.

Fix Text

This applies to Impact Level 6.
FedRAMP High.

Register the IaaS/PaaS CSP's cloud service offering in SNAP for the connection approval. 

Register the IP address that the cloud service offering uses for the cloud management portal.