The Defense Information Systems Agency (DISA) is poised to release final security guidance for purchasing cloud services on Tuesday, Jan. 13, as the Defense Department shifts to commercial providers.
Update: Read the follow-up story
After receiving more than 800 comments on the draft guidelines, DISA reorganized the security levels to allow certain work areas to exist in virtual private networks while still keeping the most sensitive data physically separated on DoD networks.
The final draft also tweaks the authorization requirements to track closer to the Federal Risk and Authorization Management Program (FedRAMP) except in specific areas where greater security assurance is needed.
Read the full story at FederalTimes.com.
