FedRAMP - Revision history

Tom: /* Solutions */

2023-10-27T17:24:55Z

‎Solutions

2023-10-27T17:21:42Z

‎Solutions

2022-12-24T16:58:15Z

Tom moved page FedRamp to FedRAMP: typograph

2022-12-24T16:57:19Z

2022-10-05T17:32:14Z

‎References

2022-10-05T17:31:32Z

‎Solutions

2022-10-05T17:30:52Z

‎Solutions

2021-11-07T21:14:15Z

‎Solutions

2021-11-07T21:13:56Z

‎Context

2021-08-16T18:48:06Z

@@ Line 8: / Line 8: @@
 * [https://www.whitehouse.gov/omb/briefing-room/2023/10/27/office-of-management-and-budget-releases-draft-memorandum-for-modernizing-the-federal-risk-and-authorization-management-program-fedramp/?fbclid=IwAR01axv_gYd7Vg6t6yqPWJAAgMROlptlG7Ed_pgLIIXBRZK7Qc7nKzTQQeE Office of Management and Budget Releases Draft Memorandum for Modernizing the Federal Risk and Authorization Management Program (FedRAMP)] published by the White House on 2023-10-27
 * [https://www.fedscoop.com/fedramp-reform-measures-enacted-as-biden-signs-ndaa-into-law/ FedRAMP reform measures enacted as Biden signs NDAA into law] 2022-12-23 as part of huge funding bill which enables agencies to assume approved software is safe.
-* Starting in fiscal year 2023 (2202-10-01) any “Federal Civilian Executive Branch” system must identify assets (which is defined as an IP address) and vulnerabilities.  https://www.cisa.gov/binding-operational-directive-23-01
+* Starting in fiscal year 2023 (2022-10-01) any “Federal Civilian Executive Branch” system must identify assets (which is defined as an IP address) and vulnerabilities.  https://www.cisa.gov/binding-operational-directive-23-01
 * Most cloud providers (AWS,Azure, etc) have special "FED only" clouds.
 * [https://www.nextgov.com/it-modernization/2021/11/what-googles-new-cloud-security-authorizations-mean-its-government-customers/186589/ Google has achieved IL4 on its entire cloud offering].

@@ Line 6: / Line 6: @@
 ==Solutions==
 * [https://www.fedscoop.com/fedramp-reform-measures-enacted-as-biden-signs-ndaa-into-law/ FedRAMP reform measures enacted as Biden signs NDAA into law] 2022-12-23 as part of huge funding bill which enables agencies to assume approved software is safe.
 * Starting in fiscal year 2023 (2202-10-01) any “Federal Civilian Executive Branch” system must identify assets (which is defined as an IP address) and vulnerabilities.  https://www.cisa.gov/binding-operational-directive-23-01

@@ Line 1: / Line 1: @@
 ==Full Title==
+The Federal Risk and Authorization Management Program (FedRAMP) applies to all cloud service purchased by the civilian US government.
 ==Context==
+[[FedRAMP]] is a US government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. In 2011, the Office of Management and Budget (OMB) released a memorandum establishing the Federal Risk and Authorization Program (FedRAMP) “to provide a cost-effective, risk-based approach for the adoption and use of cloud services to Executive departments and agencies”. The General Services Administration (GSA) established the FedRAMP Program Management Office (PMO) in June 2012. The FedRAMP PMO mission is to promote the adoption of secure cloud services across the Federal Government by providing a standardized approach to security and risk assessment. Per the OMB memorandum, any cloud services that hold federal data must be FedRAMP Authorized. FedRAMP prescribes the security requirements and process cloud service providers must follow in order for the government to use their service.
 ==Solutions==
 * Starting in fiscal year 2023 (2202-10-01) any “Federal Civilian Executive Branch” system must identify assets (which is defined as an IP address) and vulnerabilities.  https://www.cisa.gov/binding-operational-directive-23-01
 * Most cloud providers (AWS,Azure, etc) have special "FED only" clouds.

@@ Line 8: / Line 8: @@
 ==Solutions==
-* Starting in fiscal year 2023 (2202-10-01) any “Federal Civilian Executive Branch” system must identifier assets (which is defined as an IP address) and vulnerabilities.  https://www.cisa.gov/binding-operational-directive-23-01
+* Starting in fiscal year 2023 (2202-10-01) any “Federal Civilian Executive Branch” system must identify assets (which is defined as an IP address) and vulnerabilities.  https://www.cisa.gov/binding-operational-directive-23-01
 * Most cloud providers (AWS,Azure, etc) have special "FED only" clouds.
 * [https://www.nextgov.com/it-modernization/2021/11/what-googles-new-cloud-security-authorizations-mean-its-government-customers/186589/ Google has achieved IL4 on its entire cloud offering].

← Older revision	Revision as of 16:58, 24 December 2022
(No difference)

@@ Line 9: / Line 9: @@
 ==Solutions==
 * Most cloud providers (AWS,Azure, etc) have special "FED only" clouds.
-* [https://www.nextgov.com/it-modernization/2021/11/what-googles-new-cloud-security-authorizations-mean-its-government-customers/186589/ Google has achieved IL4 on its entire cloud offering.
+* [https://www.nextgov.com/it-modernization/2021/11/what-googles-new-cloud-security-authorizations-mean-its-government-customers/186589/ Google has achieved IL4 on its entire cloud offering].
 ==References==
 [[Cateory: Legislation]]