Streamlining DoD Security Compliance and Cloud Adoption
Reducing barriers to cloud adoption and enabling mission owners to rapidly build compliant architectures
Oracle Cloud Infrastructure (OCI) has launched a new Secure Cloud Computing Architecture (SCCA) for the U.S. Department of Defense (DoD). The solution is designed to simplify security compliance and cloud adoption for mission-critical workloads, using a framework of cloud-native services.
SCCA is a DoD security framework aimed at establishing standardized boundary and application-level security for Defense Information Systems Agency (DISA) Impact Level 4 and 5 data hosted in commercial cloud environments. Traditionally, achieving SCCA compliance has required substantial investments from DoD mission owners in terms of independent development efforts and third-party software licenses. These costs and time requirements pose significant challenges during cloud migrations.
The Oracle Cloud Native SCCA Landing Zone provides a secure framework for running DoD mission workloads and storing DISA Impact Level 2, 4, and 5 data within OCI government regions. Through automation, this solution empowers DoD mission owners to establish a compliant security architecture in a matter of hours or days, as opposed to the months it previously required. Leveraging cloud-native infrastructure services significantly accelerates the deployment of mission-critical workloads, reducing architectural complexities and decision-making points.
“Oracle Cloud Native SCCA Landing Zone is a game changer for our customers. What we are doing is fundamentally different,” said Rand Waldron, Vice President, OCI Global Government Sector. “We will deliver all the capabilities necessary for SCCA completely in native OCI services. Our customers will no longer have to manage multiple licenses, multiple vendor relationships, or multiple kinds of security configurations. Our SCCA solution will provide everything the customer needs to stand up an SCCA-compliant workload in the cloud.”
Utilizing standardized Infrastructure-as-Code (IAC) templates based on Terraform, OCI Landing Zones enable one-click, best-practice deployments of multiple Oracle services. Customers can initiate these templates from the Cloud Native SCCA Landing Zone, answer a few configuration questions, and have their architecture ready on the same day.
The solution also addresses the four key technical components of the SCCA framework, which include the Virtual Data Center Security Stack (VDSS), Cloud Access Point (CAP), Virtual Data Center Management Service (VDMS), and Trusted Cloud Credential Manager (TCCM). Customers opting for the secure baseline using the Cloud Native SCCA Landing Zone gain access to an architecture guide, requirements checklist, implementation guide, reference architecture, and best practices, all designed to accelerate the accreditation of their applications on OCI.
The Oracle Cloud Native SCCA Landing Zone script and related technical documentation are available at no extra charge under a customer’s contract. However, any underlying consumable cloud services used to establish Oracle Cloud Native SCCA within a customer’s tenancy may be subject to billing in accordance with the customer’s contract. Oracle Cloud for DoD services adheres to consistent global pricing, aligning with DISA Impact Levels 2, 4, and 5 and FedRAMP+ authorization standards.
OCI customers have the flexibility to leverage custom security zones with the SCCA and other OCI Landing Zones, enabling organizations to apply security policies and safeguard their configurations quickly and easily.
About Utility Analytics Institute (UAI)
UAI Enables Utility Transformation Through Analytics
UAI is a utility-led membership organization that provides support to the industry to advance the analytics profession and utility organizations of all types, sizes, and analytics maturity levels, as well as analytics professionals throughout every phase of their career.
Transforming into a data decision-based company is one of the most difficult transitions a utility will have to make to thrive in the new energy economy. It’s more than just managing massive amounts of data, implementing the right tools and technology, and people and process management. It’s ensuring you have proper change management processes in place to address cultural challenges, as well as data management and governance plans, and best practice and compliant security strategies in place. It’s implementing the best organizational structure for your utility, and hiring and retaining talented staff, plus so much more! UAI brings together leading utilities who are serious about tackling these challenges and together we concentrate on utility analytics.
What’s UAI Membership all about? UAI serves multiple audiences providing different membership packages for each audience type. Learn more about how UAI unifies our community, serves each audience to help you meet your goals and address challenges, and how each audience collaborates to better serve the utility industry.
Contact Kevin Praet, Membership Relations, at kpraet@utilityanalytics.com to learn about the benefits of becoming a member of Utility Analytics Institute (UAI).
