External Information System Services
System and Services Acquisition Policy for 18F
FedRAMP Security Controls Baseline
Federal/FedRAMP Continuous Monitoring requirements
As a government system, cloud.gov requires that all external services comply with all applicable federal software requirements. The infrastructure utilized by cloud.gov is AWS GovCloud, which is FedRAMP certified.
GSA procurement practices defines all monitoring requirements for external information systems.
cloud.gov employs continuous monitoring for both internal and external information systems.