Home / News

White House Issues Cloud Computing Policy Standards

U.S. Office of Management and Budget released a memo today establishing a program to reduce "duplicative efforts, inconsistencies and cost inefficiencies when assessing and authorizing cloud systems." The initiative called, Federal Risk and Authorization Management Program (FedRAMP), is aimed to develop a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services through standardized security requirements and controls.

"FedRAMP is a government-wide effort, and represents the efforts of the Department of Defense (DoD), the Department of Homeland Security (DHS), the General Services Administration (GSA), the National Institute of Standards and Technology (NIST), and the Office of Management and Budget (OMB), amongst many others."

Some key FedRAMP benefits include:

  • Saves significant cost, time and resources — do once, use many times
  • Improves real-time security visibility
  • Supports risk-based security management
  • Provides transparency between government and cloud service providers (CSPs)
  • Improves trustworthiness, reliability, consistency, and quality of the federal security authorization process

The full policy meme is located here on CIO.gov website.

Related topics: Cloud Computing, Data Center, Policy & Regulation, Security

WEEKLY WRAP — Get CircleID's Weekly Summary Report by Email:

Comments

Are you sure the link is correct? Stefano Canepa  –  Dec 11, 2011 2:28 PM PDT

I think the correct document to link for the cloud policy is: http://www.cio.gov/fedrampmemo.pdf.

Re: Are you sure the link is correct? Admin  –  Dec 11, 2011 3:04 PM PDT

Thank you for your feedback. The link has been corrected.

To post comments, please login or create an account.

Related Blogs

Related News

Topics

Industry Updates – Sponsored Posts

TLD Security, Spec 11 and Business Implications

Verisign Named to the Online Trust Alliance's 2015 Honor Roll

3 Key Steps for SMBs to Protect Their Website and Critical Internet Services

Key Considerations for Selecting a Managed DNS Provider

Verisign Mitigates More DDoS Attacks in Q1 2015 than Any Quarter in 2014

Verisign OpenHybrid for Corero and Amazon Web Services Now Available

Afilias Supports the CrypTech Project - Ambitious Hardware Encryption Effort to Protect User Privacy

IBCA Presentation to ICANN GAC on Protection of Geographic Names in New gTLDs

Public Sector Experiences Largest Increase in DDoS Attacks (Verisign's Q4 2014 DDoS Trends)

Help Ensure the Availability and Security of Your Enterprise DNS with Verisign Recursive DNS

Verisign iDefense 2015 Cyber-Threats and Trends

What's in Your Attack Surface?

Domain Name .Africa Faces Hurdles - Q&A with Sophia Bekele

Q3 2014 DDoS Trends: Attacks Exceeding 10 Gbps on the Rise

3 Questions to Ask Your DNS Host About DDoS

Afilias Partners With Internet Society to Sponsor Deploy360 ION Conference Series Through 2016

Neustar to Build Multiple Tbps DDoS Mitigation Platform

The Latest Internet Plague: Random Subdomain Attacks

Digging Deep Into DNS Data Discloses Damaging Domains

New gTLDs and Best Practices for Domain Management Policies (Video)

Sponsored Topics