FedRAMP

NIST's supply chain security guidance tells agencies to look to FedRAMP

The agency has spent years revising guidance for organizations to address vulnerabilities presented by vendors of software and other enterprise suppliers.

What’s next for FedRAMP?

Over the last 18 months, as the COVID-19 pandemic pushed agency networks to the brink, FedRAMP’s role in ensuring secure federal IT systems has become more critical than ever.

Senate inches closer to FedRAMP legislation

Senators expressed concerns over potential conflicts of interest, high costs and inconsistent review processes during a roundtable meeting with federal officials and IT experts overseeing the General Service Administration’s cloud security authorization program.

Leveraging OSCAL for FedRAMP authorizations

An automated FedRAMP review process will speed up authorizations, drive continuous improvement and put cloud service providers in the driver's seat.

How to fund security and modernize at the same time

FedRAMP's standards go a long way toward the security goals the White House just set -- but smaller firms must be able to afford the authorization process.

Government needs a massive investment in FedRAMP

A well-funded shared service could relieve an authorization bottleneck and bring essential cloud services to the government market.

House passes FedRAMP bill

The House today passed a bill aimed at standardizing the processes federal agencies use to onboard cloud computing technologies.

CMMC reciprocity guidelines are still a work in progress

The Defense Department is hoping to begin rolling its Cybersecurity Maturity Model Certification program later this year, but questions remain about how reciprocity with FedRAMP will be handled.

Secure and rapid modernization takes innovation from all sides

As the past few months have shown, close collaboration and aggressive sharing of lessons learned can pay big dividends.

GAO plans review of telework tech

The congressional watchdog plans to examine agency lessons learned from the rapid rollout of telework tools as part of pandemic response.

Report: FedRAMP must evolve to meet demand, emerging tech

A new report lays out where FedRAMP has gone wrong – and what can be done to fix it.

Farm credit agency looks to cloud

The small independent agricultural loan regulator wants to go all-in on cloud-based financial reporting.

State looks to the cloud for building management services

The State Department's building administration agency is investigating software-as-a-service solutions for its site managers as an alternative to an existing shared services platform.

More agencies are using FedRAMP, but some are still going rogue

While hundreds of additional government cloud projects are being vetted for cybersecurity every year, a GAO audit makes clear that many agencies are still standing up programs without going through FedRAMP.

Google Cloud gets FedRAMP High tag

Google's cloud offering earned the highest FedRAMP authorization for cloud services.

How a mature FedRAMP sets the stage for more ambitious cloud projects

Cloud adoption is being driven by broader pressure on agencies and maturation of the Federal Risk and Authorization Management Program.

Oracle fires back in JEDI lawsuit as court date approaches

Lawyers for Amazon Web Services, the Department of Justice and Oracle are set to deliver oral arguments in the long-running JEDI lawsuit on July 10, while an award from DOD is expected in late August.