Defense Compliance
IL4/IL5/IL6 impact levels, CMMC framework, ITAR controls, and cleared personnel cost governance.
DoD Impact Levels
Non-Controlled Unclassified
Low confidentiality requirements. Public cloud services authorized for non-sensitive government data.
Controlled Unclassified Information
CUI and mission critical data. DoD-authorized cloud environments required. Supports up to SECRET processing.
Controlled Unclassified High Value
Higher sensitivity CUI and NSS. DoD-dedicated cloud infrastructure with enhanced security controls.
Classified National Security Information
SECRET and CONFIDENTIAL data. Dedicated Secret cloud infrastructure required. Strict isolation mandates.
CMMC 2.0 Framework
Level 1: Foundational
Basic cyber hygiene for Federal Contract Information (FCI) protection.
Level 2: Advanced
Advanced practices for Controlled Unclassified Information (CUI) protection.
Level 3: Expert
Expert-level practices to protect against APTs. Triennial government-led assessments.
ITAR Controls
The International Traffic in Arms Regulations (ITAR) controls the export and import of defense-related articles and services. Cloud cost data involving ITAR-controlled items requires specific handling procedures.