The Center for Digital Government Best Practice Guide for Cloud and As-a-Service Procurements was first published in 2014 and updated in 2016. The guide was created to provide government and industry with consensus-based advice and terms and conditions for cloud solution procurement models. For nearly a decade, the guide has been viewed as the standard for many state and local government cloud contracting efforts.
We are pleased to present the newest version of the guide – updated in late 2022 – which offers information, options and examples designed to strengthen cloud service cybersecurity assurance and resiliency. It lays out a strategy for employing consistent baseline security and privacy controls and integrating cloud service risk and authorization management practices into cloud governance and procurement policies.