Home / News

White House Issues Cloud Computing Policy Standards

U.S. Office of Management and Budget released a memo today establishing a program to reduce "duplicative efforts, inconsistencies and cost inefficiencies when assessing and authorizing cloud systems." The initiative called, Federal Risk and Authorization Management Program (FedRAMP), is aimed to develop a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services through standardized security requirements and controls.

"FedRAMP is a government-wide effort, and represents the efforts of the Department of Defense (DoD), the Department of Homeland Security (DHS), the General Services Administration (GSA), the National Institute of Standards and Technology (NIST), and the Office of Management and Budget (OMB), amongst many others."

Some key FedRAMP benefits include:

  • Saves significant cost, time and resources — do once, use many times
  • Improves real-time security visibility
  • Supports risk-based security management
  • Provides transparency between government and cloud service providers (CSPs)
  • Improves trustworthiness, reliability, consistency, and quality of the federal security authorization process

The full policy meme is located here on CIO.gov website.

Related topics: Cloud Computing, Data Center, Policy & Regulation, Security

WEEKLY WRAP — Get CircleID's Weekly Summary Report by Email:

Comments

Are you sure the link is correct? Stefano Canepa  –  Dec 11, 2011 2:28 PM PDT

I think the correct document to link for the cloud policy is: http://www.cio.gov/fedrampmemo.pdf.

Re: Are you sure the link is correct? Admin  –  Dec 11, 2011 3:04 PM PDT

Thank you for your feedback. The link has been corrected.

To post comments, please login or create an account.

Related Blogs

Related News

Topics

Industry Updates – Sponsored Posts

Nominum Announces Future Ready DNS

New from Verisign Labs - Measuring Privacy Disclosures in URL Query Strings

DotConnectAfrica Delegates Attend the Kenya Internet Governance Forum

Neustar to Launch usTLD Stakeholder Council

3 Questions to Ask Your DNS Host about Lowering DDoS Risks

Continuing to Work in the Public Interest

Verisign Named to the OTA's 2014 Online Trust Honor Roll

4 Minutes Vs. 4 Hours: A Responder Explains Emergency DDoS Mitigation

Dyn Acquires Internet Intelligence Company, Renesys

Tips to Address New FFIEC DDoS Requirements

Smokescreening: Data Theft Makes DDoS More Dangerous

dotStrategy Selects Neustar's Registry Threat Mitigation Services for .BUZZ Registry

24 Million Home Routers Expose ISPs to Massive DNS-Based DDoS Attacks

What Does a DDoS Attack Look Like? (Watch First 3 Minutes of an Actual Attack)

Joining Forces to Advance Protection Against Growing Diversity of DDoS Attacks

Why Managed DNS Means Secure DNS

Rodney Joffe on Why DNS Has Become a Favorite Attack Vector

Motivated to Solve Problems at Verisign

Diversity, Openness and vBSDcon 2013

Neustar's Proposal for New gTLD Collision Risk Mitigation

Sponsored Topics