NIST SP 800-137

The General Services Administration has launched it’s much-awaited FedRAMP cybersecurity initiative for cloud-based products and services. 

Federal CIO Steven VanRoekel’s Memorandum for Federal Chief Information Officers, Security Authorization of Information Systems in Cloud Computing Environment, is attached below.  Also attached below is Mr. VanRoekel’s related slide presentation, Federal Information Technology Doing More with Less Through Strategic Investments.

More information may be found at www.FedRAMP.gov. 

FISMA Focus will be tracking  and reporting on FedRAMP’s ramp-up. 

The following is from GSA:

FedRAMP

The Federal Risk and Authorization Management Program (FedRAMP) is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. This approach uses a “do once, use many times” framework that will save cost, time, and staff required to conduct redundant agency security assessments.

FedRAMP was established on December 8, 2011 via an official memorandum from the Federal Chief Information Officer to all agency CIOs.  FedRAMP will achieve initial operating capability within 180 days. 

Attached below is the Federal CIO’s Memorandum for Federal Chief Information Officers

CIO FedRAMP Memo

Attached below is the Federal CIO’s slide presentation.

CIO IT Update