[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-392314-105":53,"doc-detail-392314-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","cloud-security-technical-reference-architecture-version-2-revision-history","Cloud Security Technical Reference Architecture - Version 2 - Revision History","","Cloud Security Technical Reference Architecture provides government guidance for coordinated, deliberate cloud adoption aligned with Executive Order 14028 on improving national cybersecurity. It outlines recommended approaches for cloud migration and data protection, including how Cloud Security Posture Management (CSPM) supports secure governance and reporting. The architecture also explains advantages and inherent risks of cloud services as agencies implement zero trust architectures, and establishes roles and authority to develop cloud-security technical reference documentation for the Federal Civilian Executive Branch.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/cloud-security-technical-reference-architecture-version-2-revision-history/392314/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/cloud-security-technical-reference-architecture-version-2-revision-history/392314.png","ImageObject",442,249,{"name":88,"@type":89},"Liam","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-26","2026-09-25",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",8,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What is the primary goal of the Cloud Security Technical Reference Architecture?","Question",{"text":109,"@type":110},"It illustrates recommended approaches for cloud migration and data protection to support federal agency data collection and reporting as cloud adoption continues.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"How does the document connect cloud migration to zero trust architecture?",{"text":114,"@type":110},"It states that migration to cloud technology should adopt zero trust architecture as practicable, and that the reference architecture helps inform agencies’ implementations.",{"name":116,"@type":107,"acceptedAnswer":117},"What is FedRAMP and why is it relevant?",{"text":118,"@type":110},"FedRAMP, established in 2011, provides a cost-effective, risk-based approach for federal adoption and use of cloud services, with an emphasis on security and protection of federal information.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},392314,1791177740,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":22,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":141},8796095461564,"https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d","Cloud Security Technical Reference Architecture  \nCoauthored by:  \nCybersecurity and Infrastructure Security Agency, United States Digital Service, and  \nFederal Risk and Authorization Management Program  \nJune 2022  \nVersion 2.0  \nRevision History  \nThe version number will be updated as the document is modified. This document will be updated as needed to reflect modern security practices and technologies.  \nTable 1: Revision History  \n\n| Version | Date | Revision Description | Sections/Pages Affected |\n| --- | --- | --- | --- |\n| 1.0 | August 2021 | Initial Release | All |\n| 2.0 | June 2022 | Response to RFC Feedback | All |\n\nExecutive Summary  \nExecutive Order 14028, “Improving the Nation’s Cybersecurity” marks a renewed commitment to and prioritization of federal cybersecurity modernization and strategy. To keep pace with modern technology advancements and evolving threats, the Federal Government continues to migrate to the cloud. In support of these efforts, the Secretary of Homeland Security acting through the Director of the Cybersecurity and Infrastructure Security Agency (CISA), in consultation with the Director of the Office of Management and Budget (OMB) and the Administrator of General Services acting through the Federal Risk Authorization Management Program (FedRAMP), have developed the Cloud Security Technical Reference Architecture to illustrate recommended approaches to cloud migration and data protection for agency data collection and reporting that leverages Cloud Security Posture Management (CSPM) . This technical reference architecture also informs agencies of the advantages and inherent risks of adopting cloud-based services as agencies implement to zero trust architectures.  \nAuthority  \nExecutive Order 14028, “Improving the Nation’s Cybersecurity” provides at section 3(c) (emphasis added) :  \nAs agencies continue to use cloud technology, they shall do so in a coordinated, deliberate way that allows the Federal Government to prevent, detect, assess, and remediate cyber incidents. To facilitate this approach, the migration to cloud technology shall adopt zero trust architecture, as practicable. The CISA shall modernize its current cybersecurity programs, services, and capabilities to be fully functional with cloud-computing environments with zero trust architecture. The Secretary of Homeland Security acting through the Director of CISA, in consultation with the Administrator of General Services acting through the FedRAMP within the General Services Administration, shall develop security principles governing Cloud Service Providers (CSPs) for incorporation into agency modernization efforts. To facilitate this work:  \n[…]  \nWithin 90 days of the date of this order, the Secretary of Homeland Security acting through the Director of CISA, in consultation with the Director of OMB and the Administrator of General Services acting through FedRAMP, shall develop and issue, for the Federal Civilian Executive Branch (FCEB), cloud-security technical reference architecture documentation that illustrates recommended approaches to cloud migration and data protection for agency data collection and reporting.  \nContributing Authors  \nCybersecurity and Infrastructure Security Agency  \nCISA is the operational lead for federal civilian cybersecurity and executes the broader mission to understand and reduce cybersecurity risk ot the nation. In this role, CISA seeks to provide enhanced support for agencies adopting cloud services to improve situational awareness and incident response in cloud environments. CISA is responsible for aiding federal agencies, critical infrastructure, and industry partners as they defend against, respond to, and recover from major cyber attacks.  \nUnited States Digital Service  \nThe United States Digital Service (USDS) is a senior team of technologists and engineers that support the mission of departments and agencies through technology and design. USDS’s multi-disciplinary teams bring best practices a","cbCaicjItVFM45Kv","https://ap.wps.com/l/cbCaicjItVFM45Kv","pdf",3387867,"English","# 1. Introduction\n# 2. Purpose and Scope\n## 2.1 Key Programs and Initiatives","[{\"question\":\"What is the primary goal of the Cloud Security Technical Reference Architecture?\",\"answer\":\"It illustrates recommended approaches for cloud migration and data protection to support federal agency data collection and reporting as cloud adoption continues.\"},{\"question\":\"How does the document connect cloud migration to zero trust architecture?\",\"answer\":\"It states that migration to cloud technology should adopt zero trust architecture as practicable, and that the reference architecture helps inform agencies’ implementations.\"},{\"question\":\"What is FedRAMP and why is it relevant?\",\"answer\":\"FedRAMP, established in 2011, provides a cost-effective, risk-based approach for federal adoption and use of cloud services, with an emphasis on security and protection of federal information.\"}]","Cloud Security Technical Reference Architecture - Version 2 - Revision History | PDF",1790366992,25]