Hello, Guest!
  • Saturday, November 23, 2024

FedRAMP Office to Align Cloud Security Baselines With Updated NIST Standards

The Federal Risk and Authorization Management Program office has outlined its approach to incorporate the National Institute of Standards and Technology's federal information system security and privacy controls into the government's cloud computing initiative.

The FedRAMP program management office plans to create a draft of baselines, control guidelines and parameters based on the NIST Special Publication 800-53 Revision 5 and produce an implementation guide for cloud service providers, according to a Nov. 24 blog post.

PMO will then collect and use public feedback on the proposed revisions to finalize baseline updates including the open security controls assessment language.

The office created a video about Rev5 transition efforts and intends to host training and other forums to educate participants on that process.

Video of the Day

Related Articles

Keeper Security’s Mike Eppes on Meeting CMMC Requirements With Zero Trust-Based Password Management Tools Cybersecurity

Keeper Security’s Mike Eppes on Meeting CMMC Requirements With Zero Trust-Based Password Management Tools

Mike Eppes, director of public sector at Keeper Security, said password management is one of the areas the Cybersecurity Maturity Model Certification program addresses and defense contractors should account for such requirements. He noted that the Department of Defense and contractors must advance zero trust adoption. “This ‘never trust, always verify’ attitude requires companies and

Deltek’s Michael Greenman Explains the Role of FedRAMP in ‘Cyber Arms Race’ Events

Deltek’s Michael Greenman Explains the Role of FedRAMP in ‘Cyber Arms Race’

Cyber is the “latest front in warfare” according to Michael Greenman, senior product marketing manager at Deltek.  As the U.S. government works to maintain its standing in the cyber realm, industry has “rallied around the idea of cybersecurity risks,” and the public sector has continued to update its cybersecurity standards to ensure that contractors are upholding

OMB Seeks Public Input on Draft FedRAMP Guidance; Clare Martorana Quoted News

OMB Seeks Public Input on Draft FedRAMP Guidance; Clare Martorana Quoted

The Office of Management and Budget has begun soliciting feedback on draft guidance meant to modernize and strengthen the Federal Risk and Authorization Management Program. The draft memorandum seeks to define the scope of cloud offerings subject to FedRAMP, foster a consistent and transparent process for conducting security assessment and authorization of cloud services by