New Tools Fast Track Oracle US Government Cloud Maturity Model Compliance for Defense Contractors
Oracle has unveiled new tools and documentation to assist defense contractors in complying with the Department of Defense (DoD) Cybersecurity Maturity Model Certification (CMMC) when using Oracle Cloud Infrastructure (OCI). The announcement includes the OCI Core Landing Zone automation template and CMMC-specific documentation, designed to streamline the compliance process for contractors who must meet CMMC Level 1, 2, and/or 3 requirements as of October 15, 2024.
The new tools can significantly reduce manual work in mapping controls and establishing compliance-ready cloud architecture. The OCI Core Landing Zone features baseline configurations and rules via a standardized Infrastructure-as-Code template, allowing one-click deployments of preconfigured cloud native services. Oracle US Government Cloud, which has achieved FedRAMP High JAB P-ATO status, offers these services at the same pricing as commercial public cloud regions and is available in US East and US West regions.
Oracle ha presentato nuovi strumenti e documentazione per assistere i contraenti della difesa nel rispettare il Cybersecurity Maturity Model Certification (CMMC) del Dipartimento della Difesa (DoD) quando utilizzano l'Oracle Cloud Infrastructure (OCI). L'annuncio include il modello di automazione OCI Core Landing Zone e la documentazione specifica per il CMMC, progettati per semplificare il processo di conformità per i contraenti che devono soddisfare i requisiti del CMMC di Livello 1, 2 e/o 3 a partire dal 15 ottobre 2024.
I nuovi strumenti possono ridurre significativamente il lavoro manuale nella mappatura dei controlli e nella creazione di un'architettura cloud pronta alla conformità. L'OCI Core Landing Zone presenta configurazioni di base e regole tramite un modello standardizzato di Infrastructure-as-Code, che consente distribuzioni con un clic di servizi nativi cloud preconfigurati. L'Oracle US Government Cloud, che ha ottenuto lo stato di FedRAMP High JAB P-ATO, offre questi servizi agli stessi prezzi delle regioni commerciali del cloud pubblico ed è disponibile nelle regioni degli Stati Uniti Est e Ovest.
Oracle ha presentado nuevas herramientas y documentación para ayudar a los contratistas de defensa a cumplir con el Cybersecurity Maturity Model Certification (CMMC) del Departamento de Defensa (DoD) al utilizar Oracle Cloud Infrastructure (OCI). El anuncio incluye la plantilla de automatización OCI Core Landing Zone y documentación específica para CMMC, diseñada para agilizar el proceso de cumplimiento para los contratistas que deben cumplir con los requisitos de CMMC Nivel 1, 2 y/o 3 a partir del 15 de octubre de 2024.
Las nuevas herramientas pueden reducir significativamente el trabajo manual en la mapeo de controles y el establecimiento de una arquitectura en la nube lista para la conformidad. La OCI Core Landing Zone cuenta con configuraciones y reglas básicas a través de una plantilla estandarizada de Infrastructure-as-Code, que permite despliegues con un clic de servicios nativos en la nube preconfigurados. Oracle US Government Cloud, que ha alcanzado el estado FedRAMP High JAB P-ATO, ofrece estos servicios a los mismos precios que las regiones comerciales de nube pública y está disponible en las regiones del Este y Oeste de EE. UU.
오라클은 오라클 클라우드 인프라스트럭처(OCI)를 사용할 때 방위 계약자가 국방부(DoD)의 사이버 보안 성숙도 모델 인증(CMMC)을 준수할 수 있도록 지원하는 새로운 도구와 문서를 발표했습니다. 발표된 내용에는 OCI 코어 랜딩 존 자동화 템플릿과 CMMC 전용 문서가 포함되어 있으며, 2024년 10월 15일부터 CMMC 레벨 1, 2 및/또는 3 요구 사항을 충족해야 하는 계약자를 위한 준수 프로세스를 간소화하도록 설계되었습니다.
새로운 도구는 통제를 매핑하고 준수 준비가 된 클라우드 아키텍처를 설정하는 데 필요한 수작업을 상당히 줄일 수 있습니다. OCI 코어 랜딩 존은 표준화된 인프라스트럭처-코드 템플릿을 통해 기본 구성과 규칙을 제공하며, 미리 구성된 클라우드 네이티브 서비스를 원클릭으로 배포할 수 있습니다. FedRAMP High JAB P-ATO 상태를 획득한 오라클 미국 정부 클라우드는 상업용 공공 클라우드 지역과 동일한 가격으로 이러한 서비스를 제공하며 미국 동부 및 서부 지역에서 사용할 수 있습니다.
Oracle a dévoilé de nouveaux outils et documents pour aider les entrepreneurs en défense à se conformer au Cybersecurity Maturity Model Certification (CMMC) du Département de la Défense (DoD) lors de l'utilisation de l'Oracle Cloud Infrastructure (OCI). L'annonce comprend le modèle d'automatisation OCI Core Landing Zone et une documentation spécifique au CMMC, conçus pour simplifier le processus de conformité pour les entrepreneurs devant répondre aux exigences du CMMC Niveau 1, 2 et/ou 3 à partir du 15 octobre 2024.
Les nouveaux outils peuvent réduire considérablement le travail manuel lié à la cartographie des contrôles et à l'établissement d'une architecture cloud prête à la conformité. L'OCI Core Landing Zone propose des configurations de base et des règles via un modèle standardisé d'Infrastructure-as-Code, permettant des déploiements en un clic de services cloud natifs préconfigurés. L'Oracle US Government Cloud, qui a obtenu le statut FedRAMP High JAB P-ATO, offre ces services aux mêmes tarifs que ceux des régions commerciales du cloud public et est disponible dans les régions Est et Ouest des États-Unis.
Oracle hat neue Werkzeuge und Dokumentationen vorgestellt, um Verteidigungsauftragnehmer dabei zu unterstützen, die Anforderungen des Cybersecurity Maturity Model Certification (CMMC) des Verteidigungsministeriums (DoD) bei der Nutzung der Oracle Cloud Infrastructure (OCI) zu erfüllen. Die Ankündigung umfasst die Automatisierungsvorlage OCI Core Landing Zone und CMMC-spezifische Dokumentationen, die darauf ausgelegt sind, den Compliance-Prozess für Auftragnehmer, die ab dem 15. Oktober 2024 die Anforderungen des CMMC Level 1, 2 und/oder 3 erfüllen müssen, zu optimieren.
Die neuen Werkzeuge können manuelle Arbeiten bei der Abbildung von Kontrollen und dem Aufbau einer compliance-fähigen Cloud-Architektur erheblich reduzieren. Die OCI Core Landing Zone bietet Basiskonfigurationen und Regeln über eine standardisierte Infrastructure-as-Code-Vorlage, die mit einem Klick die Bereitstellung vorgefertigter Cloud-nativer Dienste ermöglicht. Die Oracle US Government Cloud, die den FedRAMP High JAB P-ATO-Status erreicht hat, bietet diese Dienste zu denselben Preisen wie kommerzielle öffentliche Cloud-Regionen an und ist in den US-Ost- und Westregionen verfügbar.
- Launch of comprehensive tools to streamline CMMC compliance process
- Potential to save months of manual work for defense contractors
- FedRAMP High JAB P-ATO status achievement
- Consistent global pricing between government and commercial cloud services
- None.
Insights
Oracle's release of CMMC compliance tools marks a strategic acceleration in the $9.2 billion federal cloud market. This development carries significant implications for both Oracle and the defense industrial base:
- The timing is particularly strategic, aligning with the October 2024 CMMC compliance deadline. This positions Oracle to capture market share during a critical transition period when thousands of defense contractors must achieve certification.
- By offering these tools at no additional charge under existing contracts, Oracle demonstrates a clear strategy to expand its government cloud footprint while creating sticky, long-term customer relationships. The real revenue opportunity lies in the ongoing cloud service usage.
- The endorsement from GE Aerospace, a major defense contractor, provides important social proof and validates OCI's enterprise-grade capabilities.
- The automation of compliance processes through Infrastructure-as-Code templates represents a significant competitive advantage. While AWS and Microsoft Azure offer similar government cloud services, Oracle's streamlined approach to CMMC compliance could accelerate customer acquisition, particularly among small and medium-sized defense contractors who represent about 75% of the defense industrial base.
- The consistent global pricing strategy for government cloud services, matching commercial rates, positions Oracle aggressively against competitors who typically charge premium rates for government offerings.
The market impact extends beyond immediate revenue potential. By simplifying CMMC compliance, Oracle is effectively lowering barriers to entry for smaller contractors in the defense supply chain, potentially expanding the total addressable market for its cloud services. This could lead to increased adoption of Oracle's government cloud solutions and strengthen its position in the federal sector, where it has historically competed against dominant players like AWS and Microsoft.
Oracle Cloud Infrastructure makes it easier to achieve US DoD CMMC requirements,
with the potential to save months of manual work
Achieving these standards can be difficult, especially for small and medium-sized businesses. The new OCI Core Landing Zone automation template and CMMC-specific documentation can significantly ease this process, helping save months of manual work mapping controls and setting up compliance-ready cloud architecture.
"GE Aerospace uses Oracle US Government Cloud to deliver CMMC Level 2 readiness on a modernized supply chain," said Shravan Devulapalli, cybersecurity technologist, GE Aerospace. "Our modernization project was delivered on time and on budget with performance that exceeded the on-premises solution it replaced."
Achieving CMMC compliance
The CMMC Program enables the DoD to verify that defense prime contractors and subcontractors have implemented security safeguards for Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). To achieve CMMC certification, businesses must comply with controls that are aligned to the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171.
The OCI Core Landing Zone includes baseline configurations and rules delivered using a standardized Infrastructure-as-Code (IAC) template designed to help meet CMMC requirements. Based on Terraform, OCI Core Landing Zones allow customers to perform one-click, best-practice deployments of a preconfigured set of cloud native services. Customers can answer a few simple questions about their needs, launch the OCI Core Landing Zone templates, and have an architecture set up that is designed to automatically meet many CMMC controls.
Oracle US Government Cloud has also achieved FedRAMP High JAB P-ATO status, and its services meet NIST SP 800-171 control requirements.
"CMMC is more than a secure implementation in the cloud. It is documentation that authoritatively matches that implementation to the CMMC controls," said Rand Waldron, vice president, Oracle. "Oracle has gone further to help defense contractors by providing comprehensive guidance to explain how Oracle Cloud Infrastructure helps achieve compliance with CMMC requirements. Oracle provides both an informational guide and controls checklist for CMMC Levels 1 and 2 compliance."
The OCI Landing Zone and associated technical documentation are provided at no additional charge under a customer's contract. Cloud services used to stand up OCI Core Landing Zone in a customer's tenancy will be billed in accordance with the customer's contract. OCI Core Landing Zone templates are available within the OCI Console and through GitHub. For more information, check out the CMMC Level 1 and Level 2 informational guides.
Oracle US Government Cloud services are priced at the same, consistent global pricing as Oracle's commercial public cloud regions and meet DISA Impact Levels 2, 4, and FedRAMP High authorization standards. Oracle US Government Cloud is available in the US East (
Additional Resources
- Oracle US Government Cloud
- CMMC Level 2 Informational Guide
- CMMC Level 2 Controls Checklist
- CMMC Level 1 Informational Guide
- CMMC Level 1 Controls Checklist
- OCI Core Landing Zone
About Oracle
Oracle offers integrated suites of applications plus secure, autonomous infrastructure in the Oracle Cloud. For more information about Oracle (NYSE: ORCL), please visit us at oracle.com.
Trademarks
Oracle, Java, MySQL and NetSuite are registered trademarks of Oracle Corporation. NetSuite was the first cloud company—ushering in the new era of cloud computing.
View original content to download multimedia:https://www.prnewswire.com/news-releases/new-tools-fast-track-oracle-us-government-cloud-maturity-model-compliance-for-defense-contractors-302357959.html
SOURCE Oracle
FAQ
What new tools did Oracle (ORCL) release for CMMC compliance in January 2024?
When do defense contractors need to comply with CMMC requirements for ORCL cloud services?
What security certifications does Oracle (ORCL) US Government Cloud have?
Where are Oracle (ORCL) US Government Cloud services available?
How much do Oracle (ORCL) US Government Cloud services cost compared to commercial rates?
