Department of Defense (DoD) Impact Level 2 (IL2) data includes non-controlled unclassified information, which is all data cleared for public release and non-critical mission information. Cloud-based services utilized by the DoD must meet the appropriate Impact Level for the data processed according to the DISA Cloud Computing Security Requirements Guide (SRG).
The DoD IL2 baseline is equivalent to FedRAMP Moderate, therefore DoD allows full reciprocity with FedRAMP Moderate. For this reason, DoD customers should consider the following services for supporting public-facing service needs, and for higher impact needs consider utilizing offerings such as ArcGIS Enterprise that your organization can deploy and manage to meet ANY security assurance level.
Esri in-scope Services
Resources
- Esri FedRAMP Commitment (Public Trust Center page)
- DISA Cloud Security Requirements Guide (Public)