The Defense Visual Information (DIMOC) mission is to archive and distribute media assets to the Department of Defense (DoD), government, non-Federal agencies, commercial organizations, and general public. This necessitated an efficient low-cost solution to store and maintain records as well as to provide a delivery platform accessible to these aforementioned entities. DIMOC has entrusted a commercial system to accomplish this. Leveraging commercial capabilities has been a recent government paradigm in order to increase efficiency and reduce cost in an increased level of fiscal austerity. However it is equally important to consider how secure these systems are in handling potentially sensitive data. The consensus that the government needs to be more like business is equally countered by the need for business to be more like government in the area of cyber security. This paper discusses the challenges that DIMOC encountered in ensuring the security of DoD media in a commercially hosted environment.