An analysis of the National Defense Authorization Act for fiscal year 2023 hints at potential cloud-based information technology projects at the Department of Defense, according to Deltek advisory research analyst Alex Rossino.
He wrote in an article published Wednesday one provision of the law requires DOD to test and evaluate the cybersecurity of commercial cloud offerings used to store classified military data.
Under Section 1553, the defense secretary must consult with the private sector to establish a new policy that would authorize independent assessments of infrastructure from cloud service providers.
Rossino said the provision may be linked to the Pentagon’s Cybersecurity Maturity Model Certification program and applied to the Joint Warfighting Cloud Capability procurement vehicle.
The analyst added that he forecasts the department will implement a cloud-based content management system through a pilot program mandated by Section 917 of the NDAA.
