UNCLASSIFIED Cloud Access Points (CAPs) to cloud-based cybersecurity solutions for increased resilience. DoD cloud architectures will allow for workloads to shift from one AZ or region to another, within a single cloud provider, nearly instantaneously upon detection of the failure of a primary data center. This will be vital in the case of human-made or natural destruction of a large geographic area. The configuration of automated failover is not itself automatic. To fully achieve this capability, applications will need to be re-architected for the cloud. This will allow the Department to bypass the cost and manual effort currently required for the Department to maintain multiple instances of the same data across cloud providers or on-premises data centers, which does not provide the same level offailover as that provided by commercial cloud. 2.7 Drive IT Reform at DoD The cloud will allow DoD to further consolidate its sprawling data center assets. The Department still has an opportunity to further rationalize and has done significant work to rationalize and reduce data centers. The cloud will provide an opportunity to accelerate and extend those consolidation opportunities, as well as the opportunity to deliver integrated Defensive Cyber Operations (DCO) and achieve efficiencies through rapid deployment of common services. An enterprise cloud perspective will enable more centralized cloud management and a broader availability of security service options for wider cloud adoption by DoD to include those DoD Components with smaller implementation staff. 3 Strategic Approaches and Guiding Principles DoD requires an extensible and secure cloud environment that spans the homeland to the global tactical edge, as well as the ability to rapidly access computing and storage capacity to address warfighting challenges at the speed of relevance. Technologies such as AI and ML have the potential to fundamentally change the character of war. DoD will embrace an approach that leverages multiple cloud providers who can provide General Purpose and Fit For Purpose clouds. The interoperability of the multi-vendor and multi-cloud environment will be governed by one overarching enterprise cloud strategy. To achieve the objectives outlined above, the Department will pursue a set of guiding principles that will inform future decisions about enterprise clouds: Warfighter First, Cloud Smart-Data Smart, Leveraging Commercial Industry Best Practices, and Creating a Culture Better Suited for Modem Technology Evolution. 3.1 Warfighter First Throughout the Department's transition to commercial cloud services, it needs to continuously test that cloud solutions are built in a manner that never puts the warfighter and his/her mission at risk. This will require the Department to rigorously red team and challenge itself with independent assessments of the cloud environment and to utilize tactical distributed computing. At all times, DoD needs to ensure that cloud is addressing the needs of improving military lethality. By constantly challenging itself around lethality with red teams, DoD can ensure that the cloud will be positioned to support the challenges of the global environment. 7