AWS Public Sector Blog
AWS expands GSCA to classified frameworks to accelerate national security innovation
In today’s rapidly evolving threat landscape, defense agencies and intelligence organizations need faster access to commercial technologies in classified environments. Starting today, Amazon Web Services (AWS) is expanding its Global Security and Compliance Acceleration (GSCA) partner program to AWS Secret Cloud and AWS Top Secret Cloud, creating a streamlined pathway for bringing cutting-edge capabilities to national security missions.
Breaking the classified innovation barrier
Commercial technology companies and AWS Partners are developing breakthrough capabilities in artificial intelligence and machine learning (AI/ML); however, they face compliance hurdles when trying to deploy in classified environments. The complexity of security frameworks like Department of Defense Cloud Computing Security Requirements Guide Impact Level 6 (DoD CC SRG IL6), Intelligence Community Directive (ICD) 503, and Joint Special Access Program Implementation Guide (JSIG) often creates 18-24 month delays before innovation can reach the warfighter.
“Our AWS GSCA partners have demonstrated the ability to reduce the classified compliance preparation timeline for commercial AI companies, from over a year to just a few months” explained Amy Belcher, director of worldwide public sector global ISV sales and GTM at AWS. “This means mission-critical solutions can be deployed in classified environments while they still represent a technological advantage for the country.”
Specialized partners drive mission acceleration
AWS is expanding the GSCA program to classified security and compliance frameworks with six initial partners who bring proven experience in Secret and Top Secret cloud environments:
Auditing and consulting partners
- Kratos – Accelerates customer classified authorizations by leveraging cybersecurity experience with the DoD Cloud Service Provider Security Requirements Guide, to provide specialized Authority to Operate (ATO) support services that guide customers through complex authorization processes while enabling robust security control implementation.
- Fortreum -Supports customer classified authorizations (IL6 and ICD 503) through specialized cybersecurity consulting, technical testing, authorization frameworks, and automated compliance tools—enabling efficient navigation of authorization requirements and continuous alignment with defense and intelligence community security standards.
System integration partners
- SMX – Utilizes Elevate Fast Track to empower solution providers to break into classified markets by rapidly securing ATOs and deploying their technology in high-side environments. By accelerating compliance, eliminating re-architecture delays, and leveraging direct contracts, SMX helps companies unlock new revenue streams, achieve mission readiness for defense and intelligence customers, and scale innovation securely and cost-effectively.
- CACI– Accelerates customer classified authorizations by leveraging their extensive customer intimacy and experience, coupled with defense cybersecurity expertise to provide comprehensive security assessment, implementation, and ATO support services through established government relationships and proven classified systems delivery capabilities.
- Strategic Business Systems (SBS) – Advances DoD CC SRG IL6 and ICD 503 customer authorizations through comprehensive cybersecurity consulting, tailored compliance solutions, and automated assessment tools—enabling efficient adherence to stringent defense and intelligence community security standards.
Technology provider
- Second Front (2F) – Accelerating software delivery into classified environments with its flagship platform, 2F Game Warden, providing pre-authorized, compliant cloud infrastructure with robust security controls and inherited authorizations. By streamlining the ATO process, 2F Game Warden reduces timelines from years to weeks while maintaining continuous compliance across the Department of Defense and intelligence community. The platform eliminates duplicative compliance work and empowers mission partners to deploy, scale, and update applications rapidly to meet mission needs.
Clear pathways for two key audiences
For commercial innovators:
Information systems security managers (ISSMs) and compliance leaders now have a clear roadmap to build compliant solutions in the AWS Secret Cloud and AWS Top Secret Cloud through GSCA. These partner solutions enable them to:
- Reduce classified compliance documentation preparation time from months to weeks.
- Access specialized guidance that translates existing FedRAMP (NIST 800-53) controls to classified requirements.
- Deploy commercial innovations in classified environments in months rather than years.
For mission owners:
Authorization officials (AOs) and mission owners within the defense and intelligence communities can:
- Cut procurement-to-deployment timelines by up to 60 percent for critical AI/ML capabilities.
- Implement next-generation technologies with pre-vetted architectural patterns.
- Maintain continuous compliance while deploying solutions at mission speed.
Why AWS for classified innovation
The AWS Secret and Top Secret Cloud regions provide the foundation for secure, scalable, and compliant classified workloads. With the expanded GSCA program, customers now have:
- Specialized GSCA partners with deep expertise in cloud technology, mission requirements, and classified compliance.
- Accelerated pathways from commercial development to classified deployment.
- Strategic uplift path and processes through partners while using the customers’ existing authorizations
Take action today
The expanded AWS GSCA program represents a critical bridge between commercial innovation and national security operations—enabling the most advanced capabilities to reach the mission when they matter most.
Submit the GSCA Classified Cloud interest form to connect with our GSCA security partner strategists or contact your AWS account team and begin accelerating your path to classified cloud innovation.
About the AWS GSCA Program
Leverage no-cost expert guidance on security and compliance globally in healthcare, finance, and public sector and be connected with GSCA partners vetted to accelerate your compliance journey. This extension of the program to the classified regions allows for greater trust in working with partners vetted for compliance in the AWS Secret and AWS Top Secret regions with a focus on DoD CC SRG IL6 and ICD 503. To learn more, visit Global Security & Compliance Acceleration on AWS Program.
