During an Aug. 8 webinar on VMware Cloud on AWS hosted by the Digital Government Institute, participants said that VMware and AWS are setting up a dedicated instance of the service called VMware Cloud on AWS GovCloud (US). This instance is intended to meet standards set by FedRAMP, the Defense Information Systems Agency (DISA), and the International Traffic in Arms Regulation (ITAR). […]
Agencies have 68 days remaining to achieve compliance with the Department of Homeland Security’s (DHS) binding operation directive (BOD) 18-01, which requires the active enforcement of the Domain Message Authentication, Reporting, and Conformance (DMARC) protocol. […]
Security in the cloud is a shared responsibility between cloud service providers (CSPs) and government organizations. CSPs provide agencies with a secure platform to operate on, but it is the responsibility of agency security leaders to ensure the applications that are being hosted have been hardened, according to security experts. […]
Rep. Gerry Connolly, D-Va., said today that he introduced legislation – the Federal Risk and Authorization Management Program (FedRAMP) Reform Act – which would codify the FedRAMP program in Federal law and address what the congressman said are shortcomings of the program, including the slow pace of implementing standardized practices and realizing efficiencies in the certification process. […]
Welcome to MeriTalk News Briefs, where we bring you all the day’s action that didn’t quite make the headlines. No need to shout about ‘em, but we do feel that they merit talk. […]
During a General Services Administration (GSA) webinar on July 18, officials explained why Federal agencies should use GSA tools to move to the cloud, how agencies can utilize IT Schedule 70 to move to the cloud, and how to meet FedRAMP requirements. […]
Welcome to MeriTalk News Briefs, where we bring you all the day’s action that didn’t quite make the headlines. No need to shout about ‘em, but we do feel that they merit talk. […]
Matt Goodrich, FedRAMP director, and Ashley Mahan, FedRAMP evangelist, addressed industry feedback to FedRAMP’s recently released authorization boundary guidance during a webinar today. […]
Welcome to MeriTalk News Briefs, where we bring you all the day’s action that didn’t quite make the headlines. No need to shout about ‘em, but we do feel that they merit talk. […]
The Federal Risk and Authorization Management Program (FedRAMP) of the General Services Administration (GSA) on Wednesday announced the winners of the inaugural FedRAMP Five Awards at ATARC’s Cloud & Data Center Summit. […]
Welcome to MeriTalk News Briefs, where we bring you all the day’s action that didn’t quite make the headlines. No need to shout about ‘em, but we do feel that they merit talk. […]
A shift to the cloud offers government agencies an opportunity to embrace digital transformation, add automation, and rethink processes, said Federal IT panelists on Wednesday at MeriTalk’s 2018 Cloud Computing Brainstorm. […]
Welcome to MeriTalk News Briefs, where we bring you all the day’s action that didn’t quite make the headlines. No need to shout about ‘em, but we do feel that they merit talk. […]
The Federal Risk and Authorization Management Program (FedRAMP) has released new guidance to help cloud service providers (CSP) better delineate the authority and responsibility shared between providers and government agencies. […]
The world over, folks ask the same two questions every day–what’s for dinner, and what’s the weather forecast? In the government IT space, every day we’re all asking about the cloud forecast. A recent report from P&S Market Research provides new insights on the global government’s cloud appetites. […]
Google announced that Google Cloud Platform (GCP)–and Google’s underlying common infrastructure–have received the FedRAMP Rev. 4 Provisional Authorization to Operate (P-ATO) at the Moderate Impact level from the FedRAMP Joint Authorization Board (JAB). The certification covers data centers in numerous countries, so customers can take advantage of cloud services in multiple regions. […]
With compliance deadlines looming for Cloud Service Providers (CSPs), FedRAMP is ramping up its requirements for the monitoring of cloud systems. […]
Reports like December’s White House IT Modernization Report sometimes seem like they impose requirements on agencies from above. Speaking at the ServiceNow Federal Forum in February, Danielle Metz, a policy advisor at DoD Office of Science and Tech Policy and contributor to the Modernization Report, gave us a look inside the kitchen to see how these reports come together. […]
Complete Discovery Source (CDS), an eDiscovery company that finds electronic documents for litigation, announced it received a FedRAMP JAB ATO for its cloud platform on Feb. 12. […]
Agencies undergoing digital transformation are combining on-premise, hybrid, and multiple cloud solutions into their environments. To that end, agencies need to weave cloud security and protection of on-premise systems into their broader security strategy for a true, defense-in-depth approach. […]
The cloud is not a one-size fits all solution, and, as such, the government is looking to invest in two or three cloud models to support the differing security and risk-tolerance postures of agencies and to leverage various shared services, according to the President’s IT Modernization Report. […]
The Report to the President on Federal IT Modernization recommends modernizing the Trusted Internet Connections (TIC) program, which is critical to the Federal government’s broader digital transformation strategy. By the end of this month, the report calls for the Office of Management and Budget (OMB) to conduct data calls to agencies to discuss their cloud migration projects, and identify any delays caused by current TIC policy. And, by March 2, OMB will share a “preliminary update to the TIC policy,” and launch select pilot projects to test the new TIC requirements. […]
When Joby Emmons arrived for his first day as general counsel at IdeaScale, he was told: “Your first job at IdeaScale is to get us FedRAMP authorized.” […]
Last July, the Federal Risk and Authorization Management Program (FedRAMP) revamped the provisional authorization process to make life easier for cloud service providers (CSPs). The change let CSPs use a simple web form to delineate their business cases to FedRAMP’s Joint Authorization Board (JAB). […]
SAP’s National Security Services (NS2), a U.S. subsidiary of the international software company, has secured a FedRAMP JAB authorization for its cloud-based human capital management (HCM) suite. SAP NS2’s SuccessFactors HCM suite offers a variety of products, including talent acquisition and management tools, analytics tools, and core human resource tools, all running on the Amazon Web Services’ (AWS) GovCloud platform. […]
The GSA is concerned that current cloud procurement methods are leading to confusion and a lack compliance with FedRAMP requirements. To curb the contract discrepancies, the GSA released a new RFI seeking industry input to “identify examples of preferred contract language agencies should incorporate to convey FedRAMP requirements in their solicitations,” according to a FedRAMP blog. […]
The new administration has left little doubt that consolidation is a top priority. The first budget calls for deep cuts across most agencies. If achieved, these reductions are likely to put the squeeze on already stressed IT budgets. The search for creative solutions can and must intensify. The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives is pursuing a hybrid cloud model that will simultaneously address optimization, security and budget priorities—blazing a trail for other Federal agencies to follow. […]
The General Services Administration announced Sept. 28 the launch of the FedRAMP Tailored Baseline for Cloud Service Providers with Low-Impact Software-as-a-Service Systems. […]
In order to get more government agencies to transition to the cloud, agency experts said that the procurement process has to become easier and clearer. […]
FedRAMP can open business opportunities within the country and abroad for fledgling companies, according to Doug Bourgeois of Deloitte. […]