Difference between revisions of "FedRAMP"
(→Context) |
m (→Solutions) |
||
| Line 9: | Line 9: | ||
==Solutions== | ==Solutions== | ||
* Most cloud providers (AWS,Azure, etc) have special "FED only" clouds. | * Most cloud providers (AWS,Azure, etc) have special "FED only" clouds. | ||
| − | * [https://www.nextgov.com/it-modernization/2021/11/what-googles-new-cloud-security-authorizations-mean-its-government-customers/186589/ Google has achieved IL4 on its entire cloud offering. | + | * [https://www.nextgov.com/it-modernization/2021/11/what-googles-new-cloud-security-authorizations-mean-its-government-customers/186589/ Google has achieved IL4 on its entire cloud offering]. |
==References== | ==References== | ||
[[Cateory: Legislation]] | [[Cateory: Legislation]] | ||
Revision as of 14:14, 7 November 2021
Contents
Full Title
Context
The Federal Risk and Authorization Management Program (FedRAMP) is a US government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. In 2011, the Office of Management and Budget (OMB) released a memorandum establishing the Federal Risk and Authorization Program (FedRAMP) “to provide a cost-effective, risk-based approach for the adoption and use of cloud services to Executive departments and agencies”. The General Services Administration (GSA) established the FedRAMP Program Management Office (PMO) in June 2012. The FedRAMP PMO mission is to promote the adoption of secure cloud services across the Federal Government by providing a standardized approach to security and risk assessment. Per the OMB memorandum, any cloud services that hold federal data must be FedRAMP Authorized. FedRAMP prescribes the security requirements and process cloud service providers must follow in order for the government to use their service.
Solutions
- Most cloud providers (AWS,Azure, etc) have special "FED only" clouds.
- Google has achieved IL4 on its entire cloud offering.
