2018 Government Innovation Awards
Secure SaaS, accelerated
The Federal Risk and Authorization Management Program is a linchpin of the government’s ability to move to the cloud in a secure and compliant way. The FedRAMP process itself, however, can be dauntingly long and expensive for cloud service providers and agencies alike.
Enter FedRAMP Tailored. This abridged set of security controls for low-risk cloud services debuted in late 2017 and has already slashed the cost of an authorization by 50 percent to 75 percent. And it allows the process to be completed in as little as a month.
Not every cloud service can take the Tailored approach, of course, but any number of surveying, calendaring, collaboration and other workflow tools are strong contenders. By letting agencies independently validate certain security requirements, FedRAMP Tailored trims the number of validated controls by threefold relative to a “standard” FedRAMP baseline. As a result, it is easier for agencies to use the cloud tools everyone else is using.
Connect with the GCN staff on Twitter @GCNtech.