Oracle Service Cloud Gains Level 4 Security ATO From US Department of Defense
September 09, 2015
Oracle Service Cloud, the company’s comprehensive customer engagement software-as-a-service (SaaS (News - Alert)) solution has been granted an important Authority to Operate (ATO) from the United States Department of Defense (DoD) under the DoD Cloud Security Model at security impact Level 4. Oracle’s (News - Alert) U.S. DoD Cloud is a community cloud available for all DoD agencies. In short, the popular platform for commercial use will now be able to serve the federal government as a secure and authorized solution as well.
The rigorous review of Oracle’s environment was completed by an accredited third-party organization at the Level 4 security impact for a SaaS offering using a community deployment model. Level 4 security impact refers to Controlled Unclassified Information (CUI) or other critical mission data that requires protection from unauthorized disclosure. As such, Oracle Service Cloud will be able to serve the DOD for transferring and delivering data that has to be protected from unauthorized disclosure. Oracle says a number of its other cloud based solutions, such as its Capital Management Cloud, are also in the process of being reviewed by the DOD in order to gain accreditation.
“Oracle will be able to support U.S. government agencies by providing a secure platform in the cloud to better serve military men and women,” said David Vap, group vice president, Oracle Service Cloud in a statement about the accreditation. “The Department of Defense can now procure commercial cloud services in order to meet dynamic user needs, improve efficiency and drive greater productivity while at the same time, have assurances that Oracle Service Cloud delivers against process and security control requirements.”
Oracle is deploying the Oracle Service Cloud while also using the FedRAMP infrastructure as a Service (IaaS) and will have access to a number of features that the DOD can access including the ability to support the DOD Cloud First Policy. This means that Oracle is able to give the Department of Defense what it wants in terms of a secure connection using the cloud that comes at a rather lower cost option that the alternative which is moving specific servers into a warehouse space owned and operated by the DOD. This solution also gives the federal government a faster paced implementation schedule should it want to upgrade or change it’s current layout.
Edited by Peter Bernstein