Cloud computing services shall be subject to the security requirements specified in clause 252.239–7010, Cloud Computing Services, of this contract.
“For covered contractor information systems that are part of an information technology (IT) service or system operated on behalf of the Government, the following security requirements apply:
- Cloud computing services shall be subject to the security requirements specified in clause 252.239–7010, Cloud Computing Services, of this contract.
- Any other such IT service or system (i.e., other than cloud computing) shall be subject to the security requirements specified elsewhere in this contract (CFR 252.204–7012 Safeguarding covered defense information and cyber incident reporting).”