Security-minded program could aid cloud transition

If approved, FedRAMP would develop a common core of security requirements for cloud services

An interagency working group has developed a program to help agencies assess and manage the risks associated with moving applications to a cloud computing environment.

The Federal Risk and Authorization Management Program, developed by the Cloud Computing Advisory Council, will create governmentwide security requirements for cloud services based on the latest guidance from the National Institute of Standards and Technology. FedRAMP also will provide a common certification and accreditation process for security systems.

In an interview with GovInfoSecurity.com, the vice chairman of the council, NIST’s Peter Mell, said the organization has sent the details of the program to agencies, and after they give their blessing, the program will move into the testing phase.

Currently, it’s up to each agency to make sure that its cloud-based applications and systems are secure enough to store and manage government data.

“That leads to longer-than-necessary lead times to adoption and decisions not to adopt because the certification and accreditation process can be tedious,” writes J. Nicholas Hoover at InformationWeek.

A centralized process also should make it easier for industry vendors to develop products by providing them with a common set of requirements to meet, Hoover said.

About the Author

John S. Monroe is the editor-in-chief of Federal Computer Week.

Who's Fed 100-worthy?

Nominations are now open for the 2015 Federal 100 awards. Get the details and submit your picks!

Featured

Reader comments

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above