image credit: Adobe Stock

NDAA’s cloud cyber-testing provision marks another hefty DOD compliance lift, analyst says 

January 19, 2023

Via: FCW

A key provision in the fiscal 2023 National Defense Authorization Act has tasked the Defense Department with evaluating the cybersecurity of any commercial cloud systems that touch its classified data, but there are concerns about what downstream effects provision will have.

Section 1553 of the recently-passed legislation requires DOD to collaborate with industry on a new policy authorizing it “to conduct independent, threat-realistic assessments” for all commercial cloud infrastructure that provides storage or computing for classified data.

Read More on FCW