The U.S. General Services Administration announced that a key program for approving shared cloud computing security tools has issued the first approved provisional cloud security authorization to Autonomic Resources LLC.
The authorization comes from the Federal Risk and Authorization Management Program (FedRAMP) Joint Authorization Board, which is comprised of the chief information officers from GSA and the Departments of Defense and Homeland Security.
The FedRAMP program was created to provide a mechanism to certify the security of cloud computing applications, taking an “approve-once, share-often” approach, with the goal of helping federal agencies drastically reduce the time it takes to adopt new IT capabilities.
“The FedRAMP provisional authorization process sets a rigorous certification and accreditation bar for cloud service providers. By using FedRAMP and eliminating redundant security assessments, agencies can save an estimated $200,000 per authorization,” said Dave McClure, Associate Administrator of GSA’s Office of Citizen Services and Innovative Technologies. “This innovative collaboration with industry will lead to a common and more effective and efficient security authorization process government-wide.”
In order to receive this provisional authorization, Autonomic Resources documented and fully implemented the FedRAMP security controls on their cloud services offerings, according to a GSA release. In addition, they had an independent FedRAMP accredited Third Party Assessment Organization (3PAO) audit these implementations.
The authority means Autonomic Resources’ system is provisionally authorized to securely contain federal information at a moderate Federal Information Security Management
Act level of security.
Agencies will be able to review the full provisional authorization package as well as the independent assessment conducted by a FedRAMP-accredited 3PAO for their own agency specific security authorizations.
The JAB is expected to issue additional ATOs in early 2013 and announcements will be made as the authorizations are granted.
Autonomic Resources LLC is a certified 8a small business from Cary, NC, offering Infrastructure as a Service capabilities for federal agencies. Their independent assessment was completed by Veris Group, a FedRAMP accredited 3PAO.