Move From FedRAMP to DoD with Impact Level Assessment

The report explains the DoD Cloud Computing SRG impact levels (IL2–IL6), noting the retirement of IL1 and IL3, and compares them at a high level to FedRAMP baselines with examples of control counts and key requirements (e.g., U.S.-only operations, NIPRNET/SIPRNET, U.S. citizenship, and clearance for higher levels). It also outlines reciprocity between FedRAMP and DoD (e.g., Moderate ≈ IL2 and similarities between High and higher ILs) and the level of effort cloud service providers should expect when pursuing higher DoD authorizations.