Back
Governmental logo

U.S. Defense Information Systems Agency Provisional Authorization

The United States Defense Information Systems Agency (DISA) manages the evaluation and authorization of cloud services for the U.S. Department of Defense (DoD). Based on our FedRAMP Moderate authorization, DISA Cloud Service Support granted Google Cloud a DoD Impact Level 2 provisional authority to operate (P-ATO). An assessment at Impact Level 2 (IL2) allows storage or hosting of non-controlled, unclassified information as defined by the Cloud Computing Security Requirements Guide.

Google’s DISA IL2 authorization letters for Google Cloud Platform and Google Workspace are available to U.S. government customers or contractors working on behalf of a U.S. government customer upon request.

Google Cloud services that are in scope for IL2 P-ATO

Relevant products & services

Cloud Data Loss Prevention

Provides fast, scalable classification and redaction for sensitive data elements like names, credit card numbers, Google Cloud credentials, and more.

Learn more
VPC Service Controls

Keeps sensitive data private by defining a security perimeter around Google Cloud resources like Cloud Storage buckets, Cloud Bigtable instances, and BigQuery datasets.

Learn more
Security Command Center

Prevent and detect threats in virtual machines, networks, applications, and storage from one location, and act on them before they cause damage or loss.

Learn more
Google Cloud Armor

Delivers defense at scale against infrastructure and application DDoS attacks using Google’s global infrastructure and security systems.

Learn more
Access Transparency

When Google Cloud administrators access your content, Access Transparency gives you near real-time logs of their actions.

Learn more
Anthos

Built on Google-pioneered open source products like Kubernetes and Knative, Anthos lets you build hybrid applications, on-premises, or in the public cloud.

Learn more
Cloud Key Management Service

Manage cryptographic keys for your cloud services the same way you do on-premises, to protect secrets and other sensitive data that you store in Google Cloud.

Learn more
OAuth apps whitelisting - Google Workspace

Ensure that users can only grant permission to trusted applications by controlling which third-party apps are allowed to access users’ Google Workspace data.

Learn more
Access Transparency - Google Workspace

Review logs of actions taken by Google staff when accessing user-generated text entered into Gmail, Docs, Sheets, Slides, and other apps.

Learn more
Security Center - Google Workspace

Protect your organization with security analytics and best practice recommendations from Google. Included with Enterprise Plus.

Learn more
Data Loss Prevention - Google Workspace

Scan files for sensitive content and prevent users from sharing sensitive content in Google Drive or shared drive with people outside your organization.

Learn more
Alert Center - Google Workspace

Protect your organization from the latest security threats by getting real-time actionable alerts and security insights about activity in your domain.

Learn more
Reference
Department of Defense Cloud Computing Security Requirements Guide
NIST 800-53
NIST 800-171
FedRAMP
Region

U.S.

Industry

Government and public sector