3 6 1. 7 1.1 DOD 7 2. 8 2.1 (GR) CSP 8 2.1.1 GR-1A.2 Use of other CSP resources 9 2.1.2 GR-1A.3 Requirement for mission system inclusion 10 2.1.3 GR-1A.4 Access Controls - passwords 10 2.1.4 GR-1A.5 DoDIN connectivity 11 2.1.5 GR-1A.6 Separation of DoD Data 12 2.1.6 GR-1A.7 Data Locations 13 2.1.7 GR-1A.8 Data spill incident handling 14 2.2 15 2.2.1 CND-1B.1 Communication with CND Tier II Service Provider 15 2.2.2 CND-1B.2 Notice of scheduled outages 16 2.2.3 CND-1B.3 Support for DoD installed HBSS 17 3. 5 19 3.1 (AC) 21 3.1.1 Access Control (AC) - Additional controls 21 3.1.2 Access Control (AC) changed controls 26 – 3.2 (AT) 34 – 3.2.1 Awareness and Training (AT) changed controls 34 – 3.3 (AU) 36 3.3.1 Audit and Accountability (AU) additional controls 36 – 3.3.2 Audit and Accountability (AU) changed controls 41 – 3.4 (CA) 48 3.4.1 Assessment and Authorization (CA) Additional controls 48 – 3.4.2 Assessment and Authorization (CA) changed controls 50 – 3.5 (CM) 53 3.5.1 3.5.1 Configuration Management (CM) - Additional controls 53 3.5.2 Configuration Management (CM) changed controls 61 – 3.6 (CP) 69 – 3.6.1 Contingency Planning (CP) changed controls 69 – 3.7 (IA) 70 3.7.1 Identification and Authentication (IA) additional controls 70 – 3.7.2 Identification and Authentication (IA) changed controls 75 – 3.8 (IR) 79 3.8.1 Incident Response (IR) - additional controls 79 3.8.2 Incident Response (IR) - changed controls 82 3.9 (MA) 86 3.9.1 Maintenance (MA) additional controls 86 – 3.10 (MP) 89 3.10.1 Protection (MP) additional controls 89 –
3 6 1. 7 1.1 7 2. 8 2.1 (GR) CSP 8 2.1.1 GR-1A.2 Use of other CSP resources 9 2.1.2 GR-1A.3 Requirement for mission system inclusion 10 2.1.3 GR-1A.4 Access Controls - passwords 10 2.1.4 GR-1A.5 DoDIN connectivity 11 2.1.5 GR-1A.6 Separation of DoD Data 12 2.1.6 GR-1A.7 Data Locations 13 2.1.7 GR-1A.8 Data spill incident handling 14 2.2 15 2.2.1 CND-1B.1 Communication with CND Tier II Service Provider 15 2.2.2 CND-1B.2 Notice of scheduled outages 16 2.2.3 CND-1B.3 Support for DoD installed HBSS 17 3. 5 19 3.1 (AC) 21 3.1.1 Access Control (AC) - Additional controls 21 3.1.2 Access Control (AC) – changed controls 26 3.2 (AT) – 34 3.2.1 Awareness and Training (AT) – changed controls 34 3.3 (AU) 36 3.3.1 Audit and Accountability (AU) – additional controls 36 3.3.2 Audit and Accountability (AU) – changed controls 41 3.4 (CA) 48 3.4.1 Assessment and Authorization (CA) – Additional controls 48 3.4.2 Assessment and Authorization (CA) – changed controls 50 3.5 (CM) 53 3.5.1 3.5.1 Configuration Management (CM) - Additional controls 53 3.5.2 Configuration Management (CM) – changed controls 61 3.6 (CP) – 69 3.6.1 Contingency Planning (CP) – changed controls 69 3.7 (IA) 70 3.7.1 Identification and Authentication (IA) – additional controls 70 3.7.2 Identification and Authentication (IA) – changed controls 75 3.8 (IR) 79 3.8.1 Incident Response (IR) - additional controls 79 3.8.2 Incident Response (IR) - changed controls 82 3.9 (MA) 86 3.9.1 Maintenance (MA) – additional controls 86 3.10 (MP) 89 3.10.1 Protection (MP) – additional controls 89 DOD
U_CSM_level_5_iaas_ssptemplate.docx