QAD Defense Cloud: Powered by Strategic Information Group

Strategic Information Group continues its long-standing partnership with QAD to support manufacturers operating in regulated industries, including aerospace, defense, and other sectors that may be subject to government cybersecurity and export control requirements.

The QAD Defense Cloud is a managed deployment model that operates within AWS GovCloud (US) infrastructure and is administered by Strategic’s SIGSERV managed services team.

This architecture is designed to support organizations operating in environments that may involve regulatory frameworks such as:

• NIST SP 800-171, which provides guidance for protecting Controlled Unclassified Information (CUI) in non-federal systems

• CMMC (Cybersecurity Maturity Model Certification), the Department of Defense program used to verify contractor cybersecurity practices

• ITAR (International Traffic in Arms Regulations) for organizations handling controlled technical data related to defense articles

The QAD Defense Cloud provides a managed environment that can help organizations implement and operate systems consistent with many of the technical and operational expectations associated with these frameworks.

Cloud Architecture

The QAD Defense Cloud environment operates using a shared responsibility model.

• AWS GovCloud (US) provides the cloud infrastructure platform where systems operate.

• Strategic Information Group deploys, configures, and manages the QAD application environment within that infrastructure.

• Client organizations retain responsibility for data governance, user authorization, regulatory compliance obligations, and determining whether their data is subject to regulatory controls such as CUI or export restrictions.

This model enables organizations to operate their ERP environment within a secure cloud infrastructure while leveraging Strategic’s managed services for system administration and operational support.

ITAR Considerations

Organizations that manufacture, export, or distribute defense-related products may be subject to ITAR (International Traffic in Arms Regulations).

The QAD Defense Cloud environment can support operational practices commonly used by organizations working in ITAR-regulated industries, such as:

• controlled access to systems and data

• encryption of data in transit and at rest

• administrative access controls

• operational monitoring and logging

Where required by clients, Strategic can also support staffing and operational practices designed to meet U.S. person access requirements.

Compliance with ITAR regulations remains the responsibility of the organization subject to those regulations.

NIST SP 800-171

Organizations that store, process, or transmit Controlled Unclassified Information (CUI) related to U.S. government contracts may be required to implement security practices consistent with NIST SP 800-171.

The QAD Defense Cloud environment provides a managed infrastructure and operational framework that can assist organizations implementing systems intended to support these security practices.

Determination of whether data qualifies as CUI and responsibility for implementing required security controls remain with the organization handling that information.

CMMC

The Cybersecurity Maturity Model Certification (CMMC) program is used by the U.S. Department of Defense to verify cybersecurity practices among contractors and suppliers.

Organizations seeking CMMC certification often require secure system environments and operational processes that align with the controls defined in NIST SP 800-171.

The QAD Defense Cloud environment can support organizations preparing for or maintaining cybersecurity programs associated with CMMC requirements. Certification and compliance responsibilities remain with the organization seeking certification.

Supporting Regulated Manufacturers

The QAD Defense Cloud offering is available for both new and existing QAD customers operating in regulated industries, including organizations that supply products or components to the U.S. government.

By combining QAD’s enterprise ERP platform with Strategic’s managed services expertise and AWS GovCloud infrastructure, the QAD Defense Cloud provides an environment designed to support organizations operating in highly regulated sectors.

Organizations interested in learning more about the QAD Defense Cloud or assessing whether this deployment model may support their regulatory and operational requirements are encouraged to contact their Strategic representative.

Contact your Strategic representative today for a free consultation and assessment of how QAD Defense Cloud, powered by Strategic Information Group can help your organization.