Blog

Ramping into the Cloud

Got FedRAMP? If you are a cloud provider trying to work with the federal government, you need to do everything possible to meet FedRAMP requirements- including the ability to prove you are securing sensitive data.

Got FedRAMP? If you are a cloud provider trying to work with the federal government, you need to do everything possible to meet FedRAMP requirements- including the ability to prove you are securing sensitive data: FedRAMP is the result of close collaboration with cybersecurity and cloud experts from GSA, NIST, DHS, DOD, NSA, OMB, the Federal CIO Council and its working groups, as well as private industry.

Additional information on the FedRAMP governance can be found here. The FedRAMP assessment process is initiated by agencies or cloud service provider (CSPs) beginning a security authorization using the FedRAMP requirements which are FISMA compliant and based on the NIST 800-53 rev3 and initiating work with the FedRAMP PMO.

CSPs must implement the FedRAMP security requirements on their environment and hire a FedRAMP approved third party assessment organization (3PAO) to perform an independent assessment to audit the cloud system and provide a security assessment package for review.

The FedRAMP Joint Authorization Board (JAB) will review the security assessment package based on a prioritized approach and may grant a provisional authorization. Federal agencies can leverage CSP authorization packages for review when granting an agency Authority to Operate (ATO) saving time and money.

Encryption and network security aren't enough. Leverage DMsuite to ensure your private data is truly and permanently protected.