vCloud to support DOD/Fed

slinuxuzer

So, hypothetically speaking if I were designing a cloud(s) to support 50 or more tenants and potentially several thousand VM's and needed to meet very stringent FIPS standards, where would be the best place to get started researching the nitty gritty security pieces? Are there reference architectures out there?

I am pretty new to building systems to meet GOV/DOD/FED.

higherho

there are STIGS for everything. I had to secure ESXi 5.1, 5.5, vcenter, etc for DoD compliance.

http://iase.disa.mil/stigs/os/virtualization/Pages/index.aspx

Information Assurance Support Environment (IASE) Home