Dr. Michael Chipley DOD Cybersecurity Expert FedHIVE 2019 FedTalks

1. DOD Cybersecurity Expert,
FedHIVE

2. Cloud Computing
Johnston, S. Cloud_computing.svg

3. Cloud Computing Service Models
• Infrastructure as a Service (IaaS)
– Provides computing infrastructure, physical or virtual machines and other resources (e.g.,
virtual-machine disk image library, block and file-based storage, firewalls, load balancers,
IP addresses, virtual local area networks)
– Examples: Amazon EC2, Windows Azure, Rackspace, Google Compute Engine, FedHIVE
• Platform as a Service (PaaS)
– Provides computing platforms that typically include operating system, programming
language execution environment, database, web server
– Examples: AWS Elastic Beanstalk, Windows Azure, Heroku, Force.com, Google App
Engine, Apache Stratos, FedHIVE
• Software as a Service (SaaS)
– Provides access to application software: "on-demand software“
• Service provider installs, sets up and runs the application, user pays and accesses it
through a client
– Examples: Google Apps, Microsoft Office 365
https://stackoverflow.com/questions/16820336/what-is-saas-paas-and-iaas-with-examples

4. DISA Cloud Computing SRG
This CC SRG outlines the security
model by which DOD will leverage
cloud computing along with the
security controls and requirements
necessary for using cloud-based
solutions
This CC SRG applies to DOD
provided cloud services and those
provided by a contractor on behalf
of the Department

5. DISA Cloud Computing SRG
• Defines the requirements and architectures for the use and
implementation of DOD or commercial cloud services by DOD
Mission Owners
• Supports the DOD CIO Cloud initiative to migrate DOD websites
and applications from physical servers and networks within
DOD networks and data centers into lower cost commodity IT
services which typically include virtual servers and networks
that are an integral part of most cloud services provided by
both DOD and commercial CSPs

6. DISA Cloud Computing SRG

7. DISA-DOD Cloud Deployment

8. HRTec FedHIVE FedRAMP High Baseline, DOD CUI Level 5