PM-04 150 150 CloudGovCo

Applies the NIST Security Engineering Control Family IF to the platform management process for cloud projects:

  • Defines the infrastructure security requirements. [IF-1.1]
  • Identifies, obtains, and provides the infrastructure resources and services that provide security functions and services that are adequate to securely implement and support cloud projects. [IF-1.2]
  • Evaluates the degree to which delivered infrastructure resources satisfy the protection needs of cloud projects. [IF-2.1]
  • Identifies and provides security improvements or changes to the infrastructure resources as the requirements of the cloud change. [IF-2.1]