Artifact 4 · three-column inheritance
CSP PA. Access plane. Mission residual. The AO initials. Reciprocity is not automatic.
The Cloud SRG split CSP from Mission Owner. Thunderdome may be how people arrive. Residual is still verbs on this system. TBD is not a column.
CC SRG split
CSP SRG is what they inherit. Mission Owner SRG is what they still own.
CSP SRGCSP PAWhat the DISA PA actually inherited. Physical / software-defined isolation, the CSO service list, FedRAMP+ parameters. Not the mission ATO.
SCCA and/or ThunderdomeAccess planeBCAP / VDSS / VDMS / TCCM for DISN and data-at-rest path. Thunderdome for how people arrive. They do not stack as two user PEPs. Cloud→DISN still BCAP.
Mission Owner SRGMission residualShare ACLs, keys, lifecycle, base WAN, IATT conditions, 03:00, ConMon of *this* C-ITP. Verbs. Not TBD.
Mark
If they share a control matrix, we mark. We do not write the SSP.
PE / physical separationCSP PAAccess: —Mission: Accept software-defined vs GovCloud. AO initials.
SC / boundaryCSP VPC offeringAccess: BCAP + VDSSMission: No IGW. Private endpoints.
IA / identityCSP IAM in partitionAccess: Thunderdome PDP if usedMission: ICAM RP. Share ACLs. PAM.
AU / logsCSP Org trail capabilityAccess: Thunderdome logs ≠ VDMSMission: 03:00 owner. SIEM feed.
SC / cryptoCSP KMS in PAAccess: —Mission: CMEK custody. No SA keys.
CM / configCSP Org policy / SCPAccess: —Mission: IaC of the folder. Drift.
ShareControl matrix / SSP excerptWe mark inherited / hybrid / residual. We do not write the SSP.
SharePA letter + SCCA statusColumns 1 and 2 can be scored. Column 3 stays named.
ShareNothingBlank three-column sheet. They fill. AO initials later.
Not this
Reciprocity is not automatic. TBD is not a column.
- Not Automatic reciprocityThe AO initials each column. Residual is verbs, not TBD.
- Not Thunderdome as column 1People-arrival is access plane. CSP PA is still column 1.
- Not An SSP we writeIf they share a matrix, we mark. We do not author it.
Phase Zero
Three columns the AO can initial.
Leave with the sponsor
Three columns the AO can initial: CSP PA, access plane, mission residual in verbs.
Awareness, not performance
If they share a control matrix, we mark. We do not write the SSP.
Make them aware of what is needed. Do not perform it — unless they already hold the artifact.