Security, Privacy, and Compliance in the Cloud White Paper

See also  CJIS Security Policy Working Group - System and Services Acquisition (SA)