From: FedRAMP
The FedRAMP Program Management Office (PMO) is revamping FedRAMP Ready to include a FedRAMP Readiness Capabilities Assessment. The goal of this is to allow vendors to demonstrate their capabilities faster through an assessment by a 3PAO than through documentation reviews by the FedRAMP PMO. This will in turn enable CSPs and Agencies to achieve FedRAMP authorizations faster without negatively impacting risk and quality of security packages.
In order to achieve FedRAMP Ready, an accredited Third Party Assessment Organization (3PAO) must perform an onsite assessment of a Cloud Service Provider’s (CSP’s) system based on required FedRAMP Readiness Capabilities. The results of the assessment will be documented in a FedRAMP Readiness Assessment Report.
FedRAMP is releasing a draft of the FedRAMP Readiness Assessment Report Template and a companion document, the FedRAMP Readiness Assessment Guidance for CSPs and 3PAOs, for public comment. These documents are being released to our CSPs and 3PAOs to solicit their feedback and recommendations for improving these documents. The public comment for these documents begins on March 28, 2016 and will end on April 29, 2016.
Instructions for Submitting Comments:
To submit comments or feedback on either the FedRAMP Readiness Assessment Report Template or the FedRAMP Readiness Assessment Guidance for CSPs and 3PAOs, please download the documents below. Comments should be submitted using the Comment Matrix developed for each document which can be downloaded below as well. Instructions on completing the Comment Matrices can be found on the first page of the Comment Matrix files.
Email your completed Comment Matrix files to info@fedramp.com with “Readiness Capabilities Recommendations” in the subject line.
| Readiness Capabilities Document Name | Document Link |
|---|---|
| DRAFT FedRAMP Readiness Assessment Guidance for CSPs and 3PAOs |  |
| DRAFT FedRAMP Readiness Assessment Report | |
| Comment Matrix for FedRAMP Readiness Assessment Guidance for CSPs and 3PAOs | |
| Comment Matrix for FedRAMP Readiness Assessment Report | |
Leave a Reply