The Federal Risk and Authorization Management Program’s (FedRAMP) Applying Existing Frameworks Working Group reported on April 22 that it has been gathering initial input on ways to maximize the program’s use of existing commercial security frameworks, and is drilling further down into that topic by posing questions about machine-readable formats and shared commercial-Federal framework environments. […]

The Federal Risk and Authorization Management Program (FedRAMP) is aiming to maximize its use of existing commercial security frameworks and reduce redundant documentation requirements as part of its “20x” program revamp, program officials said today. […]