GAO: ‘Inconsistency Leads to Vulnerability’ When Choosing Cloud Vendors Jun 17, 2021 | 9:03 am While the Federal government certifies cloud vendors as secure through the General Services Administration’s (GSA) Federal Risk and Authorization Management Program (FedRAMP), an official at the Government Accountability Organization (GAO) shared striking statistics about agencies going outside of the program for cloud vendors, which can lead to vulnerabilities. […]
FedRAMP, NIST Release OSCAL 1.0.0 to Streamline Cloud Approval Process Jun 9, 2021 | 1:54 pm FedRAMP and the National Institute of Standards and Technology (NIST) announced the release of version 1.0.0 of the Open Security Controls Assessment Language (OSCAL) that aims to help cloud service providers (CSPs) speed the FedRAMP approval process. […]
FedRAMP Approves Remote Testing of Data Centers May 12, 2021 | 12:55 pm Due to the ongoing COVID-19 pandemic, FedRAMP announced that it is now allowing remote testing of data centers. […]
FedRAMP Extends Deadline for Connect Business Case Apr 28, 2021 | 10:34 am The General Services Administration’s FedRAMP program announced that it extended the deadline for its Connect Business Cases to May 21, 2021. […]
IRS Wants to Improve CX With Cloud-Based Surveys Apr 9, 2021 | 3:14 pm The Internal Revenue Service’s (IRS) Office of Online Services (OLS) is looking for a FedRAMP compliant Customer Feedback Management (CFM) cloud-based solution. […]
FedRAMP Releases Scanning Requirements for Cloud Containers Mar 29, 2021 | 12:32 pm The Federal Risk and Authorization Management Program (FedRAMP) has released guidance for scanning for vulnerabilities in cloud containers. […]
US Customs and Border Protection Issues RFI for Body-Worn Cameras Mar 29, 2021 | 10:51 am U.S. Customs and Border Protection (CBP) issued a request for information (RFI) regarding the private sector capabilities to support key capabilities of an Incident-Driven Video Recording System (IDVRS) program – body-worn cameras (BWC), video management systems (VMS), IT infrastructure, cloud-based storage systems, and other interrelated systems supporting incident-driven recordings. […]
FedRAMP Takes Cloud to YouTube Mar 25, 2021 | 3:36 pm The FedRAMP Program Management Office (PMO) announced March 24 that it has recently joined YouTube. The PMO said its channel will serve as “a one-stop source for quick, simple, informative videos on FedRAMP tutorials, and program updates.” […]
Census Bureau Turns to Cloud to Design and Deploy Surveys Mar 19, 2021 | 2:14 pm The United States Census Bureau is turning to cloud services, in the form of Software-as-a-Service (SaaS), to design and deploy surveys. […]
Federal Agency Bolsters Remote Collaboration and Communication With FedRAMP Secure Video Streaming Platform Mar 15, 2021 | 8:00 am As COVID-19 created unprecedented demand for remote work, one Federal agency was especially well equipped to transition to full telework in March 2020. The civilian agency had invested in robust collaboration tools and IT infrastructure, including network bandwidth upgrades in January 2020, which eased the transition and kept workers productive. […]
USDA Needs Cloud-Based EEO Complaints Tracking System Mar 4, 2021 | 11:59 am The Department of Agriculture’s (USDA) Office of the Assistant Secretary for Civil Rights (OASCR) is looking for a new cloud-based Equal Employment Opportunity (EEO) complaint tracking system. […]
U.S. Marine Corps Needs Cloud-Based Reservation Tool Feb 24, 2021 | 2:29 pm The U.S. Marine Corps (USMC) is looking to streamline desk and conference room reservations through a cloud-based solution. […]
Secret Service Eyes Purchasing Cloud-Based Body Cameras Feb 22, 2021 | 3:32 pm The Secret Service is looking to purchase approximately 2,000 cloud-based body cameras for its agents, according to a request for information (RFI) posted on Beta.Sam.gov. The RFI notes that the eventual contract would be a firm fixed-price contract. […]
GSA Announces Redesign of FedRAMP Website to Improve User Experience Feb 16, 2021 | 3:02 pm The General Services Administration (GSA) announced today that it has revamped the FedRAMP website to “further empower agencies to use innovative cloud technologies and to continue driving security and protection of Federal information.” […]
Zscaler Says Internet Access Service Prioritized for FedRAMP ‘High Impact Level’ Feb 5, 2021 | 10:01 am Cloud security provider Zscaler said this week that its Zscaler Internet Access (ZIA) service has been selected to be “prioritized” for Joint Authorization Board (JAB) FedRAMP certification at the High Impact Level through the General Services Administration’s FedRAMP Connect program. […]
MeriTalk’s New Platform, MeriTV, Launches Today Jan 27, 2021 | 9:00 am Today, MeriTalk launches MeriTV, a new platform delivering news and commentary on today’s mission-critical government IT challenges. […]
FedRAMP Chips Away at Initiatives to Move to Automated Processes Jan 20, 2021 | 9:29 am The Federal Risk and Authorization Management Program (FedRAMP) is looking to make the move from manual processes to automated ones, focusing on two strategic initiatives that will make cloud security even easier for agencies. […]
FedRAMP Codification Bill Gets Early Jump With Quick House Approval Jan 5, 2021 | 3:17 pm After being excluded from the final version of the National Defense Authorization Act (NDAA), the 117th Congress made the Federal Risk Assessment and Management Program (FedRAMP) Authorization Act one of the first bills passed in the House, passing by voice vote today. […]
FedRAMP Gathers Feedback From 3PAOs Dec 1, 2020 | 4:09 pm The FedRAMP Program Management Office (PMO) recapped its efforts to gather feedback from Third Party Assessment Organizations (3PAOs) in a new blog post. […]
Executive Q&A: Rackspace Technology Talks FedRAMP and Speeding the Path to ATO Nov 30, 2020 | 9:00 am Build once, use many times is a foundational framework to accelerate IT modernization, drive innovation and maximize the value of investments. In Federal IT, standardizing security and compliance of cloud solutions is underway with the Federal Risk and Authorization Management Program (FedRAMP). But the process has historically been time consuming and expensive for vendors, preventing the rapid delivery of cloud-based solutions in support of agency missions. […]
FedRAMP Shares Plan to Transition to NIST Rev5 Nov 25, 2020 | 10:00 am FedRAMP released its plan to align with the National Institute of Standards and Technology’s (NIST) latest update to SP 800-53, Security and Privacy Controls for Information Systems and Organizations, Revision 5 (Rev5). […]
FedRAMP Seeing More Authorization Reuses During COVID Nov 23, 2020 | 12:57 pm Federal agencies are leveraging past work on authorizations to operate (ATO) to bring in more cloud tools covered by the Federal Risk Authorization Management Program (FedRAMP) during the COVID-19 pandemic, said Brian Conrad, FedRAMP Cybersecurity Program Manager. […]
FedRAMP Poised to Become Law, Bolstering Funding and Authorization Reuse Nov 23, 2020 | 10:12 am The Federal Risk Assessment and Management Program (FedRAMP) is poised to take a major step forward as the House and Senate take up of the National Defense Authorization Act (NDAA) of 2021 – a high priority post election. This must-pass legislation authorizes appropriations and establishes policies for the Defense Department. […]
CenturyLink NOCs/SOCs Get FISMA High Certification Sep 2, 2020 | 3:20 pm CenturyLink said on Sept. 1 that the company has attained FISMA (Federal Information Security Management Act) High certification for its federal network operations centers and security operations centers. […]
FedRAMP Makes Progress and Looks for Consistency in 2021, Director Says Aug 26, 2020 | 11:24 am The General Services Administration’s (GSA) FedRAMP Program has made significant strides over fiscal year 2020 and its priorities remain consistent as we look toward FY2021. […]
Zscaler Progressing Toward FedRAMP High Impact for ZIA Gateway Aug 6, 2020 | 2:13 pm Cloud security provider Zscaler said it is making progress in efforts to obtain “High Impact” level classification under the Federal Risk and Authorization Management Program (FedRAMP) for its Zscaler Internet Access (ZIA) service – a secure internet and web gateway solution that was the first product of its kind to receive to earn FedRAMP certification earlier this year. […]
House Passes NDAA; Bill Earns White House Veto Threat Jul 22, 2020 | 11:26 am After two days of floor debate, the House of Representatives on July 21 approved its version of the National Defense Authorization Act for Fiscal Year 2021, by a vote of 295 to 125. […]
FedRAMP Codification Bill Added to House NDAA Legislation Jul 21, 2020 | 10:47 am The House voted late on July 20 to include in the Fiscal Year 2021 National Defense Authorization Act (NDAA) legislation that would codify into law the FedRAMP program – giving the program a statutory foundation and formal standing for congressional review. […]
FedRAMP Agency Liaison Program Yielding Positive Results Jul 8, 2020 | 9:22 am The General Services Administration (GSA) attributes the FedRAMP program’s success to building a culture that prioritizes continuous improvement, and aims to continue program growth through its recently launched FedRAMP Agency Liaison Program. […]
Big Tech Stumps for $1 Billion TMF Boost Jun 30, 2020 | 10:35 am A collection of trade groups representing the nation’s biggest tech firms is urging Senate leadership to match or exceed the $1 billion in funding for the Technology Modernization Fund (TMF) approved by the House last month as part of the HEROES Act pandemic-relief legislation. […]