Azure GSS AO Decision Letter

Reset
Public Health Service
Centers for Disease Control
and Prevention (CDC)

DEPARTMENT OF HEALTH & HUMAN SERVICES

Memorandum
Date

09/15/2023

From

Suzi M. Connor, Authorizing Official

Subject

Security Authorization Decision (Authorization to Operate) for the

OCIO Azure GSS
( OCIO Azure GSS
To

High
) (_________________)

Calvin Johnson, Infrastructure Services Branch Director
Based on the results of the security assessment of the OCIO Azure GSS
and its
constituent system-level components located throughout the CDC and the supporting
evidence provided by the successful security risk assessment and the Plan of Action and
Milestones (POA&M), I have determined that the risk to agency operations, agency
assets, or individuals resulting from the operation of OCIO Azure GSS
is
acceptable. Accordingly, I am issuing an authorization to operate to
OCIO Azure GSS
in its existing operating environment until 03/14/2025
.
OCIO Azure GSS
is authorized without any significant restrictions or limitations.
This security authorization is my formal declaration that adequate security controls have
been implemented in OCIO Azure GSS
and that a satisfactory level of security is
present in the system.
Controls for this system must be reviewed annually in accordance with the requirements
detailed in the Federal Information Security Modernization Act of 2014. Modifications to
the system will be reviewed via a security impact analysis and, if identified as making
major changes to the overall system that affects the security controls or general
architecture, the system may be required to undergo a re-assessment and potential reauthorization to maintain a level of its assurance to operate and process data on CDC
networks.
A copy of this letter with all supporting security authorization documentation should be
retained in accordance with the CDC records retention schedules.

X

Suzi M. Connor S

Suzi M. Connor
Authorizing Official

Digitally signed by Suzi M.
Connor -S
Date: 2023.09.15 08:52:13
-04'00'