{ "metadata": { "version": "1.0.0", "lastUpdated": "2026-10-21T00:00:00.000Z", "updateSource": "CISCO " }, "serviceIdentification": { "fedRampPackageId": "FR2634659095", "providerName": "CISCO", "serviceName": "Cisco Cloud Control with AgenticOps", "serviceAcronym": "C3", "serviceDescription": "Cisco Cloud Control with AgenticOps\nCisco Cloud Control with AgenticOps serves as the autonomous control plane for hybrid cloud environments. By integrating \"AgenticOps\"—a framework of specialized, task-oriented AI agents—the system moves beyond traditional automation into autonomous remediation and lifecycle management. It is designed to handle complex compliance requirements by enabling agents to autonomously detect drift, perform vulnerability remediation, and ensure that infrastructure state remains continuously aligned with defined security policies.\n\nCisco Cloud Control is the unified management and orchestration platform for hybrid and multi-cloud environments. It acts as the central plane for governing, securing, and operating distributed infrastructure, providing consistent policy enforcement and lifecycle automation across disparate cloud services and data centers. By centralizing management, it eliminates operational silos, streamlines compliance, and ensures that infrastructure remains performant and secure at scale.\nThe Rich Suite of Offers\nTo support the autonomous capabilities of Cloud Control, the following products integrate into a cohesive operational ecosystem:\n1. AI Canvas\nDescription: The design and orchestration workbench for the AgenticOps ecosystem. AI Canvas provides a visual interface for engineering teams to design, model, and deploy autonomous agents. It allows for the mapping of complex operational workflows into executable logic, ensuring that agents are constrained by well-defined operational boundaries before they are deployed to manage production environments.\n2. AI Assistant\nDescription: The natural language operational interface for the suite. AI Assistant bridges the gap between human intent and machine execution. It enables engineers to query system status, request complex remediation tasks, or gain insights into compliance posture through conversational interactions. It serves as the primary gateway for users to interface with the autonomous agents created in AI Canvas.\n3. AI Defense\nDescription: The dedicated security layer for the AI model pipeline and agentic infrastructure. AI Defense provides the necessary guardrails to protect AI models from adversarial manipulation, data leakage, and unauthorized access. In high-compliance environments, it ensures that the models driving the agents are hardened, verifiable, and protected against vulnerabilities that could compromise the integrity of the automated security remediation processes.", "certificationType": "20x", "website": "https://www.cisco.com/site/us/en/solutions/artificial-intelligence/agentic-ops/cisco-cloud-control/index.html", "logo": "https://brand-assets.security.cisco.com/cisco-light.svg" }, "serviceProperties": { "serviceType": [ "SaaS" ], "deploymentModel": "Public Cloud", "businessCategory": [ "Artificial Intelligence (AI)", "Cybersecurity & Risk Management", "Network Management", "System Administration" ], "nextOngoingCertificationReportDate": "2026-12-05", "trustCenter": { "repositoryType": [ "Trust Center" ], "url": "https://trust.paramify.com/ciscocloudcontrol", "repositoryDescription": "Product and Security documentation", "authenticationRequired": true, "accessRequestInstructions": "Step 1: Navigate to trust.paramify.com/ciscocloudcontrol\nStep 2: Click the Request Access button" }, "secureConfigurationGuidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://securitydocs.cisco.com/docs/ai-def/user/97360.ditamap", "repositoryDescription": "Product and Security Documentation", "authenticationRequired": false, "accessRequestInstructions": "Follow link and access guide." } }, "contactInformation": [ { "contactType": "Authorizing Official", "contactName": "Federal Risk and Authorization Management Program Program Management Office" }, { "contactType": "Prepared For", "contactName": "Federal Risk and Authorization Management Program Program Management Office" }, { "contactType": "Information System Security Officer" }, { "contactType": "System Point of Contact - Technical" }, { "contactType": "System Owner", "contactName": "Josh Howard" }, { "contactType": "System Point of Contact - Management" }, { "contactType": "Content Approver", "contactName": "Mike Leddy" }, { "contactType": "Privacy Point of Contact" }, { "contactType": "Authorizing Official Point of Contact" }, { "contactType": "Prepared By", "contactName": "CISCO" }, { "contactType": "Security", "contactName": "Omar Sheikh", "contactEmail": "cisco-fedramp@cisco.com" }, { "contactType": "Sales", "contactName": "Sales", "contactEmail": "aidefense-partner@cisco.com" } ], "certifiedServices": [ { "serviceName": "AI Defense", "serviceDescription": "The dedicated security layer for the AI model pipeline and agentic infrastructure. AI Defense provides the necessary guardrails to protect AI models from adversarial manipulation, data leakage, and unauthorized access. In high-compliance environments, it ensures that the models driving the agents are hardened, verifiable, and protected against vulnerabilities that could compromise the integrity of the automated security remediation processes." }, { "serviceName": "Cisco AI Assistant", "serviceDescription": "Cisco AI Assistant is an intelligent, conversational AI tool integrated into Cisco network management platforms such as the Meraki dashboard and Cisco Catalyst Center. It enables IT teams to expedite routine tasks, gain real-time network insights, and optimize network performance using natural language prompts. The assistant leverages Cisco’s Deep Network Model and global expertise to provide context-aware insights, automate routine workflows, and accelerate troubleshooting with step-by-step guidance and documentation summaries. It helps simplify network management by delivering real-time health information, identifying root causes of issues, and enabling automated configuration changes through conversational commands. Cisco AI Assistant is designed to reduce manual errors, increase efficiency, and empower IT teams to operate with greater confidence and productivity across their networks" }, { "serviceName": "Cisco AI Canvas", "serviceDescription": "AI Canvas is a shared operational workspace where people and AI agents work together to investigate and resolve IT issues.\nAn investigation in AI Canvas can bring together information from Cisco products and integrated third-party systems—such as monitoring, incident-management, security, automation, and knowledge-management tools—along with uploaded files, organizational knowledge, and specialized AI agents." }, { "serviceName": "Cisco Cloud Control", "serviceDescription": "Security Cloud Control is Cisco’s unified, cloud-native security management interface for the Cisco Security Cloud. It simplifies and strengthens defenses by centralizing security solutions into a single, cohesive interface. This approach eliminates silos, reduces complexity, and provides end-to-end visibility, empowering organizations to proactively address security" } ], "thirdPartyInformationResources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "FR2412062433", "useCase": "Cisco Cloud Control (C3)\nC3 integrates with Atlassian Gov Cloud via secure, mutual TLS (mTLS) REST APIs. When infrastructure drift or policy non-compliance is detected across managed customer clouds, C3 automatically generates change tracking tickets in Jira Gov, links remediation playbooks, records Human-in-the-Loop (HITL) step-up approval sign-offs, and publishes topology runbooks to Confluence Gov.\nAI Defense\nTechnical Description (CPO-CSO-OVR): AI Defense streams security alerts-such as repeated adversarial prompt injections, anomalous model jailbreak attempts, and token violations-into dedicated SecOps queues in Jira Gov. Confluence Gov maintains version-controlled synthetic red-teaming playbooks and adversarial taxonomy test suites." }, { "fedRampCertifiedThirdPartyInformationResource": "AGENCYAMAZONEW", "useCase": "Cisco Cloud Control (C3)\nC3's multi-tenant management plane, orchestration microservices, and state databases are deployed natively on AWS GovCloud. C3 leverages Amazon EKS-D for container execution, Amazon Aurora PostgreSQL with FIPS 140-validated encryption for persistent state management, AWS KMS for cryptographic envelope key management, and Amazon EventBridge for task distribution to ephemeral execution pods.\nAI Defense\nAI Defense hosts its model security proxy and inspection microservices inside dedicated AWS Nitro Enclaves on AWS GovCloud. Token evaluation, CUI/PII data loss prevention (DLP) filtering, prompt injection detection, and embedding vector parsing execute entirely within hardware-isolated CPU/memory enclaves." }, { "fedRampCertifiedThirdPartyInformationResource": "FR2428769635XL", "useCase": "Cisco Cloud Control (C3) and AI Defense\nUse as cloud-based risk management and compliance automation platform that builds a single, living data model of an systems’ security posture to automate documentation, reporting, and framework mapping. Cisco's public Trust Center" } ], "nonCertified": [ { "name": "GitHub", "provider": "GitHub", "website": "https://github.com/", "useCase": "C3's entire cloud footprint, Kubernetes manifests (EKS-D), Terraform/OpenTofu modules, and Open Policy Agent (OPA/Rego) governance policies are defined, version-controlled, and managed within private GitHub Enterprise repositories. AI Defense: GitHub serves as the Signed Ruleset & S-SDLC Engine, managing prompt inspection heuristics, synthetic adversarial regression testing, and automated vulnerability scanning before rules enter Nitro Enclaves." } ] } }