FedRAMP


Federal CIOs say agencies and government contractors must become completely familiar with FedRAMP security controls and how they relate to each agency prior to the cloud computing service program’s launch this summer.

Richard Spires, CIO of the Department of Homeland Security, was one of several CIOs who spoke about FedRAMP at a trade group breakfast Friday. He told the packed breakfast meeting that contractors and agencies alike have to remember that FedRAMP is “not just an optional thing we can elect to do,” it’s mandatory. Keep reading →


One of the many benefits of being the director of research at GTRA is that it offers the opportunity to speak candidly and off the record with countless executives from Defense, Intelligence and Civilian agencies who share what they really care about, not what mandates and initiatives tell them to focus on.

The result is a real-time snapshot of the most frequently made comments by federal IT executives, some of which may come as a surprise. Among the most frequently uttered comments I’ve received over the past few months, which may or may-not come as a surprise: Keep reading →


How do agencies extend their governance, risk and compliance programs to take cloud computing initiatives into account?

That’s a question that panelists grappled with during a discussion of cloud-computing security issues at the annual FOSE conference in Washington, D.C., on Tuesday. Keep reading →


Don’t wait around for the next wave in technology. Cloud computing is here to stay. You’ll have to deal with it sooner or later.

That was the message from IT managers attending annual FOSE conference in Washington, D.C., on Tuesday from a panel of top federal CIOs. Keep reading →


Tight budgets cannot be an excuse for lack of innovation. Rather, federal CIO Steven VanRoekel told the audience at the annual FOSE conference in Washington, D.C. on Tuesday that agencies have a prime opportunity to drive efforts to build a 21st century digital government.

I think we will see a catalyst effect by having FedRamp out there and driving this forward.” – Steven VanRoekel Keep reading →


Government has never lacked for big ideas. Getting them accomplished has been another story, although the nation’s interstate highway system, the Internet and landing men on the moon are among just a few examples of where the federal government has succeeded in doing amazing things.

One of the big–if not quite so lofty–ideas now being floated in planning discussions among senior IT leaders at the Office of Management and Budget, is a long term view towards developing a government-wide entity to supply the back office computing systems and core business services for federal agencies. Keep reading →

Microsoft officials revealed Thursday that the company is planning to develop a new dedicated multi-tenant, government community cloud computing environment.

The move is part of a broadening effort at Microsoft and its public sector division to meet emerging needs among federal agencies whose officials are trying to find faster, more economical and secure ways to migrate parts of their computing operations to the cloud. Keep reading →

Not only has cybersecurity started to take shape legislatively, cloud computing security has started to take shape administratively in a meaningful way.

You won’t find huge surprises in the grandly named Concept of Operations (CONOPS) for the Federal Risk and Authorization Management Program, or FedRAMP. The 47-page document does fill out the plan, long promised by The Office of Management and Budget and the General Services Administration. What might be surprising is how elaborate the procedures and project plan turn out to be. Keep reading →

The General Services Administration, which issued operating plans Tuesday for securing and monitoring cloud computing systems in the government, released a slide presentation and comments earlier today, explaining how the program will work. The information, captured during a presentation with reporters, was made available in the form of a video presentation released on YouTube.

The new program is known as the Federal Risk and Authorization Management Program, or FedRAMP. The program is part of a coordinated governmentwide effort to simplify the approval process for Web-based cloud computing services. Keep reading →

The General Services Administration will begin accepting applications Jan. 9, 2012, for the first group of companies to be chosen as Third Party Assessment Organizations (3PAO) for the newly launched FedRAMP initiative, also known as the Federal Risk and Authorization Management Program program.

Officials for GSA and the National Institute of Standards and Technology made the joint announcement during the “Industry Forum on FedRAMP and Third Party Assessment Organizations”, held December 16 at GSA headquarters in Washington, DC. The half-day session presented the most up-to-date guidance for industry representatives on the FedRAMP Third Party Assessment Organization (3PAO) application process. Keep reading →

Page 3 of 512345