{"id":"F1508277234","name":"Government Cloud - Common Controls","provider":"Oracle","providerSlug":"oracle","status":"FedRAMP Certified","impact":"Not yet listed","authType":"Program","serviceModel":["IaaS"],"deployment":"Government Community Cloud","businessFunctions":[],"assessor":"Coalfire Systems, Inc.","assessorId":"138514","smallBusiness":false,"website":"https://www.oracle.com/","description":"The OGC-CC is a collection of common Oracle cloud information resources within the public sector cloud (Oracle Public Cloud) that support the Oracle applications, platforms, and services provided to U.S. Government/public sector customers (SaaS, PaaS, and IaaS). These include current service offerings (SaaS) such as Oracle Service Cloud, planned services offerings such as Fusion, PBCS, and Taleo, and any other service Oracle may implement in the future (SaaS, PaaS, and IaaS). The environment serves as a community cloud that supports current and future Oracle Cloud FedRAMP-compliant systems. The authorization boundary of the system includes the common hardware, software, information, data, applications, communications, facilities, and people that provide support for a variety of users and applications and will be leveraged by future Oracle Cloud authorization packages. The OGC-CC boundary starts at the premise router and ends with the physical cable that connects to each Oracle Cloud Service's firewall. The dependent system boundaries start at each service's firewall, and each service is responsible for all assets (hardware/software), policies, procedures, and any other item thereafter.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Oracle%20Logo.png","inMarketplace":false,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Coalfire Systems, Inc."},"timeline":[{"date":"2017-01-19","to":"JAB Review","certType":"Rev5"},{"date":"2018-03-14","to":"FedRAMP Certified","certType":"Rev5"}],"trustCenterCheck":null}