New Tools Fast Track Oracle US Government Cloud Maturity Model Compliance for Defense Contractors
Rhea-AI Summary
Oracle has unveiled new tools and documentation to assist defense contractors in complying with the Department of Defense (DoD) Cybersecurity Maturity Model Certification (CMMC) when using Oracle Cloud Infrastructure (OCI). The announcement includes the OCI Core Landing Zone automation template and CMMC-specific documentation, designed to streamline the compliance process for contractors who must meet CMMC Level 1, 2, and/or 3 requirements as of October 15, 2024.
The new tools can significantly reduce manual work in mapping controls and establishing compliance-ready cloud architecture. The OCI Core Landing Zone features baseline configurations and rules via a standardized Infrastructure-as-Code template, allowing one-click deployments of preconfigured cloud native services. Oracle US Government Cloud, which has achieved FedRAMP High JAB P-ATO status, offers these services at the same pricing as commercial public cloud regions and is available in US East and US West regions.
Positive
- Launch of comprehensive tools to streamline CMMC compliance process
- Potential to save months of manual work for defense contractors
- FedRAMP High JAB P-ATO status achievement
- Consistent global pricing between government and commercial cloud services
Negative
- None.
News Market Reaction 1 Alert
On the day this news was published, ORCL gained 1.22%, reflecting a mild positive market reaction.
Data tracked by StockTitan Argus on the day of publication.
Oracle Cloud Infrastructure makes it easier to achieve US DoD CMMC requirements,
with the potential to save months of manual work
Achieving these standards can be difficult, especially for small and medium-sized businesses. The new OCI Core Landing Zone automation template and CMMC-specific documentation can significantly ease this process, helping save months of manual work mapping controls and setting up compliance-ready cloud architecture.
"GE Aerospace uses Oracle US Government Cloud to deliver CMMC Level 2 readiness on a modernized supply chain," said Shravan Devulapalli, cybersecurity technologist, GE Aerospace. "Our modernization project was delivered on time and on budget with performance that exceeded the on-premises solution it replaced."
Achieving CMMC compliance
The CMMC Program enables the DoD to verify that defense prime contractors and subcontractors have implemented security safeguards for Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). To achieve CMMC certification, businesses must comply with controls that are aligned to the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171.
The OCI Core Landing Zone includes baseline configurations and rules delivered using a standardized Infrastructure-as-Code (IAC) template designed to help meet CMMC requirements. Based on Terraform, OCI Core Landing Zones allow customers to perform one-click, best-practice deployments of a preconfigured set of cloud native services. Customers can answer a few simple questions about their needs, launch the OCI Core Landing Zone templates, and have an architecture set up that is designed to automatically meet many CMMC controls.
Oracle US Government Cloud has also achieved FedRAMP High JAB P-ATO status, and its services meet NIST SP 800-171 control requirements.
"CMMC is more than a secure implementation in the cloud. It is documentation that authoritatively matches that implementation to the CMMC controls," said Rand Waldron, vice president, Oracle. "Oracle has gone further to help defense contractors by providing comprehensive guidance to explain how Oracle Cloud Infrastructure helps achieve compliance with CMMC requirements. Oracle provides both an informational guide and controls checklist for CMMC Levels 1 and 2 compliance."
The OCI Landing Zone and associated technical documentation are provided at no additional charge under a customer's contract. Cloud services used to stand up OCI Core Landing Zone in a customer's tenancy will be billed in accordance with the customer's contract. OCI Core Landing Zone templates are available within the OCI Console and through GitHub. For more information, check out the CMMC Level 1 and Level 2 informational guides.
Oracle US Government Cloud services are priced at the same, consistent global pricing as Oracle's commercial public cloud regions and meet DISA Impact Levels 2, 4, and FedRAMP High authorization standards. Oracle US Government Cloud is available in the US East (
Additional Resources
- Oracle US Government Cloud
- CMMC Level 2 Informational Guide
- CMMC Level 2 Controls Checklist
- CMMC Level 1 Informational Guide
- CMMC Level 1 Controls Checklist
- OCI Core Landing Zone
About Oracle
Oracle offers integrated suites of applications plus secure, autonomous infrastructure in the Oracle Cloud. For more information about Oracle (NYSE: ORCL), please visit us at oracle.com.
Trademarks
Oracle, Java, MySQL and NetSuite are registered trademarks of Oracle Corporation. NetSuite was the first cloud company—ushering in the new era of cloud computing.
View original content to download multimedia:https://www.prnewswire.com/news-releases/new-tools-fast-track-oracle-us-government-cloud-maturity-model-compliance-for-defense-contractors-302357959.html
SOURCE Oracle
FAQ
What new tools did Oracle (ORCL) release for CMMC compliance in January 2024?
When do defense contractors need to comply with CMMC requirements for ORCL cloud services?
What security certifications does Oracle (ORCL) US Government Cloud have?
Where are Oracle (ORCL) US Government Cloud services available?
How much do Oracle (ORCL) US Government Cloud services cost compared to commercial rates?
