How It Works

CloudSCAPE integrates with GCC 2.0 and other SGTS products like the Cloud Management Portal (CMP), TechPass, and SEED, delivering seamless features to developers and team members. It performs daily scans of agencies' cloud resources, assessing findings against the controls defined in each subsystem's System Security Plan (SSP), with results consolidated in the Security Centre on Console.

The Security Centre gives agencies a clear view of their cloud security posture, including IM8 assessment results and key risk indicators. Every system is classified into a risk tier (low, medium, or high-risk/CII), which determines the control set it must meet. Findings reflect the system's tier and control set, enabling actionable steps to address non-compliance and guiding targeted remediation efforts.