Oracle(ORCL) Prnewswire·2025-01-23 13:00Oracle Cloud Infrastructure and CMMC Compliance - Oracle announced a comprehensive set of tools and documentation to help defense contractors comply with the Department of Defense (DoD) Cybersecurity Maturity Model Certification (CMMC) when using Oracle Cloud Infrastructure (OCI) [1] - Defense contractors must comply with CMMC Level 1, 2, and/or 3 by October 15, 2024, over a phased implementation period [1] - The OCI Core Landing Zone automation template and CMMC-specific documentation can significantly ease the compliance process, potentially saving months of manual work [2] OCI Core Landing Zone Features - The OCI Core Landing Zone includes baseline configurations and rules delivered using a standardized Infrastructure-as-Code (IAC) template based on Terraform [4] - Customers can perform one-click, best-practice deployments of preconfigured cloud native services, automatically meeting many CMMC controls [4] - The OCI Landing Zone and associated technical documentation are provided at no additional charge under a customer's contract [6] Oracle US Government Cloud - Oracle US Government Cloud has achieved FedRAMP High JAB P-ATO status and meets NIST SP 800-171 control requirements [5] - The services are priced at the same global pricing as Oracle's commercial public cloud regions and meet DISA Impact Levels 2, 4, and FedRAMP High authorization standards [7] - Oracle US Government Cloud is available in the US East (Ashburn, VA) and US West (Phoenix, AZ) regions [7] Customer Experience and Case Study - GE Aerospace used Oracle US Government Cloud to achieve CMMC Level 2 readiness, delivering a modernization project on time and on budget with performance exceeding the on-premises solution it replaced [3] Additional Resources and Information - Oracle provides an informational guide and controls checklist for CMMC Levels 1 and 2 compliance [6] - OCI Core Landing Zone templates are available within the OCI Console and through GitHub [6]