Helpful Cloud Security Implementation Guides

Overview

Once you've determined the scope of security objectives and requirements for a cloud service offering, the implementation phase begins. Many professionals are left scratching their heads determining how to implement security objectives and requirements with their underlying cloud hosting provider resources.

The guides below provide a helpful starting point for cloud security implementation to meet security objectives and standards.

Amazon Web Services

• CMMC Level 1
• CMMC Level 2
• FedRAMP Low
• FedRAMP Moderate
• FedRAMP High (Part 1)
• FedRAMP High (Part 2)
• HIPAA Security
• NIST 800-53 Rev. 5
• NIST 800-171
• NIST 800-172
• NIST CSF
  
• NIST Privacy Framework v1.0
• PCI DSS 4.0 (Excluding global resource types)
• PCI DSS 4.0 (Including global resource types)

Google Cloud Platform

• FedRAMP Architecture Template
• FedRAMP Guide
• Network Configuration for FedRAMP High and DoD IL2, IL4, & IL5
• PCI DSS

Google Workspace

• CJIS
• DoD IL4
• FedRAMP Guide

Microsoft Azure

• CMMC Level 3
• FedRAMP High
• FedRAMP Moderate
• NIST 800-53 Rev. 5
• PCI DSS 4.0
• SOC 2 Type 2

Microsoft Azure Government

• CMMC Level 3
• FedRAMP High
• FedRAMP Moderate
• NIST 800-53 Rev. 5
• SOC 2 Type 2

Microsoft Entra ID

• AAL 1
• AAL 2
• AAL 3
• FedRAMP High Access Control Controls
• FedRAMP High Identification and Authentication Controls
• FedRAMP High Additional Controls
• CMMC Level 1
• CMMC Level 2 Access Control Controls
• CMMC Level 2 Identification and Authentication Controls
• CMCC Level 2 Additional Controls
• HIPAA Access Controls
• HIPAA Audit Controls
• HIPAA Additional Controls
• HITRUST
• PCI DSS Requirement 1
• PCI DSS Requirement 2
• PCI DSS Requirement 5
• PCI DSS Requirement 6
• PCI DSS Requirement 7
• PCI DSS Requirement 8
• PCI DSS Requirement 10
• PCI DSS Requirement 11

Oracle Cloud Infrastructure

• FedRAMP