Security-minded program could aid cloud transition

If approved, FedRAMP would develop a common core of security requirements for cloud services

An interagency working group has developed a program to help agencies assess and manage the risks associated with moving applications to a cloud computing environment.

The Federal Risk and Authorization Management Program, developed by the Cloud Computing Advisory Council, will create governmentwide security requirements for cloud services based on the latest guidance from the National Institute of Standards and Technology. FedRAMP also will provide a common certification and accreditation process for security systems.

In an interview with GovInfoSecurity.com, the vice chairman of the council, NIST’s Peter Mell, said the organization has sent the details of the program to agencies, and after they give their blessing, the program will move into the testing phase.

Currently, it’s up to each agency to make sure that its cloud-based applications and systems are secure enough to store and manage government data.

“That leads to longer-than-necessary lead times to adoption and decisions not to adopt because the certification and accreditation process can be tedious,” writes J. Nicholas Hoover at InformationWeek.

A centralized process also should make it easier for industry vendors to develop products by providing them with a common set of requirements to meet, Hoover said.

About the Author

John Monroe is Senior Events Editor for the 1105 Public Sector Media Group, where he is responsible for overseeing the development of content for print and online content, as well as events. John has more than 20 years of experience covering the information technology field. Most recently he served as Editor-in-Chief of Federal Computer Week. Previously, he served as editor of three sister publications: civic.com, which covered the state and local government IT market, Government Health IT, and Defense Systems.

Featured

  • Cybersecurity

    DHS floats 'collective defense' model for cybersecurity

    Homeland Security Secretary Kirstjen Nielsen wants her department to have a more direct role in defending the private sector and critical infrastructure entities from cyberthreats.

  • Defense
    Defense Secretary James Mattis testifies at an April 12 hearing of the House Armed Services Committee.

    Mattis: Cloud deal not tailored for Amazon

    On Capitol Hill, Defense Secretary Jim Mattis sought to quell "rumors" that the Pentagon's planned single-award cloud acquisition was designed with Amazon Web Services in mind.

  • Census
    shutterstock image

    2020 Census to include citizenship question

    The Department of Commerce is breaking with recent practice and restoring a question about respondent citizenship last used in 1950, despite being urged not to by former Census directors and outside experts.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.