3 6 1. 7 1.1 DOD 7 2. 8 2.1 (GR) CSP 8 2.1.1 GR-1A.2 Use of other CSP resources 9 2.1.2 GR-1A.3 Requirement for mission system inclusion 10 2.1.3 GR-1A.4 Access Controls - passwords 10 2.1.4 GR-1A.5 DoDIN connectivity 11 2.1.5 GR-1A.6 Separation of DoD Data 12 2.1.6 GR-1A.7 Data Locations 14 2.1.7 GR-1A.8 Data spill incident handling 14 2.2 15 2.2.1 CND-1B.1 Communication with CND Tier II Service Provider 15 2.2.2 CND-1B.2 Notice of scheduled outages 16 2.2.3 CND-1B.3 Support for DoD installed HBSS 17 3. 4 19 3.1 (AC) 21 3.1.1 Access Control (AC) - Additional controls 21 3.1.2 Access Control (AC) changed controls 22 – 3.2 (AT) 30 – 3.2.1 Awareness and Training (AT) changed controls 30 – 3.3 (AU) 32 3.3.1 Audit and Accountability (AU) additional controls 32 – 3.3.2 Audit and Accountability (AU) changed controls 33 – 3.4 (CA) 40 3.4.1 Assessment and Authorization (CA) Additional controls 40 – 3.4.2 Assessment and Authorization (CA) changed controls 42 – 3.5 (CM) 46 3.5.1 3.5.1 Configuration Management (CM) - Additional controls 46 3.5.2 Configuration Management (CM) changed controls 47 – 3.6 (CP) 55 – 3.6.1 Contingency Planning (CP) changed controls 55 – 3.7 (IA) 56 3.7.1 Identification and Authentication (IA) additional controls 56 – 3.7.2 Identification and Authentication (IA) changed controls 57 – 3.8 (IR) 61 3.8.1 Incident Response (IR) - additional controls 61 3.8.2 Incident Response (IR) - changed controls 63 3.9 (MA) 67 3.9.1 Maintenance (MA) additional controls 67 – 3.10 MA-4 (7) (MP) 68 3.10.1 Protection (MP) additional controls 68 –
3 6 1. 7 1.1 7 2. 8 2.1 (GR) CSP 8 2.1.1 GR-1A.2 Use of other CSP resources 9 2.1.2 GR-1A.3 Requirement for mission system inclusion 10 2.1.3 GR-1A.4 Access Controls - passwords 10 2.1.4 GR-1A.5 DoDIN connectivity 11 2.1.5 GR-1A.6 Separation of DoD Data 12 2.1.6 GR-1A.7 Data Locations 14 2.1.7 GR-1A.8 Data spill incident handling 14 2.2 15 2.2.1 CND-1B.1 Communication with CND Tier II Service Provider 15 2.2.2 CND-1B.2 Notice of scheduled outages 16 2.2.3 CND-1B.3 Support for DoD installed HBSS 17 3. 4 19 3.1 (AC) 21 3.1.1 Access Control (AC) - Additional controls 21 3.1.2 Access Control (AC) – changed controls 22 3.2 (AT) – 30 3.2.1 Awareness and Training (AT) – changed controls 30 3.3 (AU) 32 3.3.1 Audit and Accountability (AU) – additional controls 32 3.3.2 Audit and Accountability (AU) – changed controls 33 3.4 (CA) 40 3.4.1 Assessment and Authorization (CA) – Additional controls 40 3.4.2 Assessment and Authorization (CA) – changed controls 42 3.5 (CM) 46 3.5.1 3.5.1 Configuration Management (CM) - Additional controls 46 3.5.2 Configuration Management (CM) – changed controls 47 3.6 (CP) – 55 3.6.1 Contingency Planning (CP) – changed controls 55 3.7 (IA) 56 3.7.1 Identification and Authentication (IA) – additional controls 56 3.7.2 Identification and Authentication (IA) – changed controls 57 3.8 (IR) 61 3.8.1 Incident Response (IR) - additional controls 61 3.8.2 Incident Response (IR) - changed controls 63 3.9 (MA) 67 3.9.1 Maintenance (MA) – additional controls 67 3.10 MA-4 (7) (MP) 68 3.10.1 Protection (MP) – additional controls 68 DOD
U_CSM_level_4_iaas_template.docx