Skip to content
Cloud SecurityUnited States

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

What is DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3?

DISA's security requirements for cloud services holding DoD data: the FedRAMP+ baseline by impact level, US jurisdiction and tenant separation, DoD data ownership, continuous monitoring and change notice, DoD PKI, STIGs, facility and personnel vetting, spill, off-boarding and media rules, cloud access points and network separation, encryption at rest with DoD keys, registration and supply chain duties, and the cyberspace defence, incident reporting and forensics obligations on providers and mission owners. It comprises 29 controls organised across 2 domains, and applies in the United States.

Map this against the frameworks you already hold

The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.

Browse the framework graph →

Where DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 overlaps with the standards you already hold

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 vs ISO 27001:2022View comparison →DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 vs SOC 2View comparison →DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 vs NIST CSF 2.0View comparison →DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 vs GDPRView comparison →DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 vs HIPAAView comparison →DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 vs PCI DSS 4.0View comparison →

What DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 means in your sector

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for Healthcare→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for Financial Services→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for Technology→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for Government→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for Manufacturing→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for Energy→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for Retail→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for Education→

What DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 means for your job

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for CISOs→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for Compliance Officers→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for Risk Managers→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for IT Directors→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for DPOs→DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 for Auditors→

Questions people ask about DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3

What is DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3?
DISA's security requirements for cloud services holding DoD data: the FedRAMP+ baseline by impact level, US jurisdiction and tenant separation, DoD data ownership, continuous monitoring and change notice, DoD PKI, STIGs, facility and personnel vetting, spill, off-boarding and media rules, cloud access points and network separation, encryption at rest with DoD keys, registration and supply chain duties, and the cyberspace defence, incident reporting and forensics obligations on providers and mission owners.
How many controls does DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 have?
DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 contains 29 controls organized across 2 domains.
Where does DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 apply?
DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 applies in United States. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 is covered here?
This page covers Version 1, Release 3 (6 March 2017).

Query DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 programmatically

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3, its 29 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3 API reference and MCP config →

How ready are you for DoD Cloud Computing Security Requirements Guide (CC SRG) v1r3?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Get Your Readiness Report, from $49Explore Platform Free
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .