Figure 1 Impact Level Comparison

Figure 2 Notional Division of Security Inheritance and Risk

Figure 3 Ongoing Assessment Division of Responsibility

Figure 4 DoD Continuous Monitoring for CSOs with a FedRAMP JAB PA

Figure 5 DoD Continuous Monitoring for FedRAMP CSOs with a 3PAO assessed Non-DoD Federal Agency ATO

Figure 6 DoD Continuous Monitoring for DoD Assessed CSOs

Figure 7 DoD Change Control Process for CSPs CSOs with a FedRAMP JAB PA

Figure 8 DoD Change Control Process for FedRAMP CSPs CSOs with a 3PAO assessed Federal Agency ATO

Figure 9 DoD Change Control Process for DoD Self-Assessed CSPs/CSOs

Figure 10 DoD Cloud Incident Response and Cyber Defense C2 Model

Figure 11 DoD Cloud Incident Response and Cyber Defense C3 Data Sharing