The following are some of the standards that have been adopted by U.S. government agencies:
- Criminal Justice Information Services (CJIS): The CJIS Security Policy defined by the Federal Bureau of Investigation (FBI) defines 13 areas that private contractors, such as cloud service providers, must evaluate to determine consistency with CJIS requirements. They correspond closely to NIST 800-53, which is also the basis of FedRAMP.
- Department of Defense (DoD): The Defense Information Systems Agency (DISA) provides information infrastructure and communications support in a secure and resilient manner for organizations playing a role in the defense of the United States. DISA developed the DoD cloud computing Security Requirements ...