Data.gov uses established and documents configuration settings for its information technology products employed within its Virtual Private Cloud (VPC) and the Cloud Foundry platform that reflect the most restrictive mode consistent with operational requirements.
Security & Baseline Configuration, Utilizing SCAP Checklists when available, all configurations are validated via authenticated vulnerability and compliance scans, AWS Trusted Advisor, AWS Config, VisualOps cloud management, and AlienVault USM for AWS.