Call us now:
Ted Dziekanowski DFARS 252.204-7012 says that organisations that use cloud must be equivalent to FEDRAMP moderate and those that use cloud computing services that are part of an Information Technology service or system operated on behalf of the Government must comply with DFARS 252.204-7010.
If they take the FEDRamp route one assumes cloud security and the shared responsibility model opens up for contractors and cloud providers? One would assume that an MSP that stores or transmit CUI on behalf of a contractor would also have to follow FEDRamp?
#cmmc #dfars #cybersecurity #dod
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6947449795510738944