CISA finalizes cloud security guidance documents under agency’s ‘SCuBA’ project

The Cybersecurity and Infrastructure Security Agency has issued final versions of guidance documents under its “SCuBA” project to help government agencies and the private sector secure cloud environments, as directed by a 2021 executive order on securing federal systems.

CISA has “released the first series of final security guidance resources under our Secure Cloud Business Applications (SCuBA) project: the Extensible Visibility Reference Framework (eVRF) Guidebook and a Technical Reference Architecture (TRA) document,” the agency said in a Tuesday announcement.

These...