FedRAMP

  • A new report highlights the Defense Department's challenges in adopting cloud services, and what it's doing to overcome them.

    October 19, 2015
  • There is a growing interest on Capitol Hill to codify some aspects of cloud computing, including the security authorization program known as FedRAMP.

    September 28, 2015
  • The Defense Department has greenlighted three dozen commercial cloud offerings since it first overhauled its commercial cloud security processes in January.

    September 28, 2015
  • Matt Goodrich, FedRAMP director at the Office of Citizen Services and Innovative Technologies at GSA, wants to hear what's working and what's not as more agencies move to the cloud.

    August 13, 2015
  • At least 38 cloud service providers are now compliant with the Federal Risk and Authorization Management Program -- up 41 percent over the past six months. And initial estimates show at least 700 cloud systems meet FedRAMP standards. But the General Services Administration knows there's a gap between what agencies and vendors report and what they're actually using. Matt Goodrich is FedRAMP director at the Office of Citizen Services and Innovative Technologies at GSA. He tells In Depth with Francis Rose that he wants to hear what's working -- and what's not -- as more agencies move to the cloud.

    August 11, 2015
  • Setting the record straight on what exactly Stan Kaczmarczyk said on June 2 about the cloud cybersecurity effort known as Federal Risk Authorization and Management Program (FedRAMP). There have been several blogs and some articles that either didn\'t understand or misconstrued his comments, which has set some in the federal community off in the wrong direction.

    June 15, 2015
  • The General Services Administration tells agencies they shouldn\'t rule out contractors who don\'t have Federal Risk and Authorization Management program authorizations yet. The program is only a few years old. And GSA says agencies who require FedRAMP compliance as a condition for contractors to bid on work, are limiting competition. Katie Lewin is the former program manager for cloud computing at the General Services Administration, and now an independent consultant. She tells In Depth with Francis Rose what government\'s role is in vendors being able to adopt FedRAMP.

    June 11, 2015
  • The Homeland Security Department and the FedRAMP program management office released a draft crosswalk between the cloud cybersecurity program and the Trusted Internet Connection (TIC) initiative. The goal is to make it easier for federal workers to access their network and apps securely through mobile devices.

    April 02, 2015
  • Maria Roat, former FedRAMP director and current CTO at Transportation, sat down with the Women of Washington radio show to discuss her work on FedRAMP and the challenges she faced in its implementation.

    February 18, 2015
  • New security guide places more trust in governmentwide FedRAMP program to secure unclassified data in commercial clouds, but retains tougher restrictions for more sensitive information.

    January 15, 2015
  • Get rid of data centers and start using cloud computing. It seemed like a simple directive from the White House. But nothing in the federal government is that easy. Confusion over how to incorporate cloud security standards into cloud contracts has reached a breaking point. The Office of Federal Procurement Policy is jumping in to clarify the best ways for agencies to use the Federal Risk Authorization and Management (Fed-RAMP) standards in solicitations. Federal News Radio's executive editor Jason Miller joined Tom Temin on the Federal Drive to discuss the expected changes to Fed-RAMP in 2015.

    December 17, 2014
  • Agencies are struggling in how they describe the requirement for cloud services to meet the Federal Risk Authorization and Management Program cyber standards. The FedRAMP program management office details programmatic goals for 2015, including new metrics to determine governmentwide uptake of the standards.

    December 17, 2014
  • Confusion over how to incorporate cloud security standards in procurements has reached a breaking point. The Office of Federal Procurement Policy is writing a new policy to give agencies some guidance on how to include the Federal Risk Authorization and Management Program, or FedRAMP, standards in solicitations. Federal News Radio Executive Editor Jason Miller tells In Depth with Francis Rose about the new policy and other expected changes to FedRAMP in 2015.

    December 16, 2014
  • The Federal Risk Authorization and Management Program will send a draft baseline standard for FISMA high systems around the government for comment in the next month. Matt Goodrich, the acting director of the FedRAMP program, said the high-impact baseline would apply only to non-classified technology systems as characterized under the Federal Information Security Management Act.

    November 28, 2014