FEDRAMP JUNE 2018 FEDRAMP AT A GLANCE FedRAMP was created out of - - PowerPoint PPT Presentation
FEDRAMP JUNE 2018 FEDRAMP AT A GLANCE FedRAMP was created out of - - PowerPoint PPT Presentation
FEDRAMP JUNE 2018 FEDRAMP AT A GLANCE FedRAMP was created out of the U.S. Governments Federal Cloud Computing Initiative to remove the barriers to cloud adoption 175 Cloud Service Providers pursuing or have achieved an FedRAMPs Goals
2
FEDRAMP AT A GLANCE
FedRAMP was created out of the U.S. Government’s Federal Cloud Computing Initiative to remove the barriers to cloud adoption
In 6 Years, FedRAMP Enabled Government To Avoid
>$170 MILLION IN COSTS & 1/3 of the world’s internet traffic pass through our vendors
138
Agencies authorizing a FedRAMP service
175
Cloud Service Providers pursuing or have achieved an authorization
44
Unique 3rd Party Assessors
FedRAMP’s Goals
- Ensure the use of cloud
services protects federal information
- Enable reuse across the
Federal government wherever possible to save money and time
3
FEDRAMP IMPACTS
750+
Annual meetings with agencies and vendors
3,500+
Followers on Twitter
9400+
Questions answered through info@fedramp.gov
9000+
Stakeholders on listserv
POINTS OF CONNECTION COMMUNITY ENGAGEMENT AGENCIES CSPs
4
THE YEAR OF REFINEMENT
2018 is “The Year of Refinement” for FedRAMP
MORE CLOUD TO CHOOSE FROM
- Increase Authorized Cloud Services
- Increase Re-used Authorizations
- Convert FedRAMP-Ready CSPs to In-Process or Authorized
CSPs TRANSFORM SECURITY AUTHORIZATIONS
- Automate the Authorization Process
- Continue to push FedRAMP Tailored Authorizations
STRONGER FEDRAMP COMMUNITY
- Connect the Community Through Industry and Agency Days
- Enhance 3PAO Resources with Updated 3PAO Requirements
- Promote Better Understanding of FedRAMP and the
Authorization Process
5
FEDRAMP JUNE HAPPENINGS
June is a busy month for the FedRAMP Program!
New FedRAMP Training Platform and 300-Level Course: We’re launching a new Training Platform, which will provide a cohesive view of the FedRAMP curriculum and provide a quality user experience. 3PAO Requirements Release: We received feedback on the draft R311
- requirements. We’re reviewing the feedback, and will release the finalized
R311 requirements sometime in the coming weeks. Authorization Boundary Guidance and Feedback: We released guidance on authorization boundaries to educate CSPs, Agencies, and 3PAOs and inform their creation and review of these boundaries. Readiness Assessment Report (RAR) Template Update and Webinar: We will be releasing an updated RAR template that provides guidance on describing and assessing risk associated with system interconnections, Application Programming Interfaces (APIs), and external services. We will be hosting a webinar on the update this summer that will include time for Q&A. FedRAMP Connect: The next round of FedRAMP Connect, where we prioritize CSPs to work with the JAB toward a Provisional Authority to Operate (P-ATO) will begin within the next couple of weeks.
6