Cloud Community of Interest FedRAMP Accelerated Feedback FedRAMP - - PowerPoint PPT Presentation
Cloud Community of Interest FedRAMP Accelerated Feedback FedRAMP Forms, Templates and Methods of Completion June 2016 Advancing Government through Collaboration, Education and Action Our Team Advancing Government through Collaboration,
Advancing Government through Collaboration, Education and Action
June 2016
Advancing Government through Collaboration, Education and Action
Advancing Government through Collaboration, Education and Action
Templates and Methods of Completion Work Stream Team
3
CSP Group Leader 3PAO Group Leader System Integrators Group Leader Kyle Hendrickson (BRMi) Kathleen Fischer (Vencore) Jennifer Gray (Amazon Web Services) Topic Leader Jason Wong (Superb Internet) Government Group Leader Roopangi Kadakia (NASA)
Advancing Government through Collaboration, Education and Action
Advancing Government through Collaboration, Education and Action
Objective and Scope
5
Objective
Government, SIs) on the FedRAMP Forms, Templates and Methods of Completion from ACT-IAC Cloud COI members and present findings to FedRAMP PMO
Scope
Advancing Government through Collaboration, Education and Action
Advancing Government through Collaboration, Education and Action
Approach
1. Assign group leads for each stakeholder community (CSP, 3PAO, Government, SI) 2. Develop survey 3. Solicited feedback from ACT-IAC Cloud (COI) members using web-based survey 4. Validated & synthesized feedback 5. Analyze results 6. Present findings to FedRAMP PMO 7. Deliver formal feedback to FedRAMP PMO
7
Advancing Government through Collaboration, Education and Action
Advancing Government through Collaboration, Education and Action
The following questions were posed
1. Please rank the following [18] FedRAMP Templates in the order of importance to fully support FedRAMP Readiness, where 1 is most important and 5 is least important. 2. Please provide a brief description of any issues/challenges that you've had with the following FedRAMP templates. 3. Please rank the following [18] FedRAMP Templates in the order of importance to be refreshed, where 1 is most important and 5 is least important. 4. Please mark the preferred method of completion for the following [18] FedRAMP Templates. 5. If you selected "Other" for methods of completion, please elaborate further 6. Are you interested in working with the COI in developing a proof-of-concept (POC) for one of the above mentioned methods of completion?
9
Advancing Government through Collaboration, Education and Action
Advancing Government through Collaboration, Education and Action
Respondents
11
Advancing Government through Collaboration, Education and Action
Question 1. FedRAMP Templates in the order of importance to support FedRAMP readiness
12 2 4 6 8 10 12 14 16 18 20
1 (Most) 2 3 4 5 ( Least)
Advancing Government through Collaboration, Education and Action
13
N/A or None Document not valuable or not needed Not aligned with related docs Lacks grammar guidance Contains duplicate section Does not reflect latest FISMA standards Not tailored for cloud systems Too prescriptive Not prescriptive enough Too complex Need ability to import/export Input should be data driven with validation General formatting / organization issues MS Word embedded documents challenges MS Word form fields limits length of input Current format (Word/Excel) not ideal Make web-based with links to sections Other specific issues Contingency Plan Template 3
1 2 1
Controls Implementation Summary Template
3 1 1
e-Authentication Template
4 1 1
FIPS 199 Template
3 2 1
PTA & PIA Template
4 1 1
RoB Template
3 1 1 1
SSP
2 1 1 1 1 1 1 1 1 3
SAP Template
2 1 1 1 1 1 1 1
4 1 1 1 1 1 1
FedRAMP Rev. 3 to 4 Annual Asmt. Controls Template
2 3
POA&M Template
3 1 1 1
POA&M Template Completion Guide
3 1 1
SAR
1 1 2 1 4 1 1
Template FedRAMP ATO
5 1
FedRAMP Annual Assessment. Guidance
4 1 1
Annual SAR Template
3 1 1 2
SAP for Annual Assessment
3 1 1 1 1 1
Significant Change Form
3 1 1 1
Question 2. Brief description
that you've had with FedRAMP templates
Advancing Government through Collaboration, Education and Action
Question 3. FedRAMP Templates in the order of importance to be refreshed (1 = most, 5 = least)
14 2 4 6 8 10 12 14 16 18 20
1 (Most) 2 3 4 5 ( Least)
Advancing Government through Collaboration, Education and Action
Question 4. Preferred method of completion of FedRAMP Templates
15 2 4 6 8 10 12 14
Web-based Word/Excel PDF Other
Advancing Government through Collaboration, Education and Action
Question 5. If you selected "Other" for methods of completion, please elaborate further.
1. .xml or other extensible or database compatible format 2. SSP, SAR, SAP all should be web-based but must be able to be exported and imported to allow for working off-line. 3. Web portal or web based form that walks you through completion process and where you can save the data as you complete it online. Also provides completion percentage.
16
Advancing Government through Collaboration, Education and Action
Question 6. Are you interested in working with the COI in developing a proof-of-concept (POC) for one of the above mentioned methods of completion?
17
9 respondents agreed to help!
Advancing Government through Collaboration, Education and Action
Feedback Summary
Importance to determine readiness:
Issues/challenges with completion:
– Controls Implementation Summary Template – e-Authentication Template – FIPS 199 Template – RoB Template – FedRAMP Rev. 3 to 4 Annual Asmt. Controls Template – Significant Change Form
18
Advancing Government through Collaboration, Education and Action
Feedback Summary (continued)
Importance of being refreshed:
Methods of Completion:
19
Advancing Government through Collaboration, Education and Action
Advancing Government through Collaboration, Education and Action
Next steps…
deadline
Work Streams:
– June: JAB Prioritization Criteria – (Ongoing): Open Forum
21
Advancing Government through Collaboration, Education and Action