White House Issues Cloud Computing Policy Standards

Home / News

White House Issues Cloud Computing Policy Standards

By CircleID Reporter
December 09, 2011, 3:39 am PST Views: 15,058 Comments: 2

U.S. Office of Management and Budget released a memo today establishing a program to reduce “duplicative efforts, inconsistencies and cost inefficiencies when assessing and authorizing cloud systems.” The initiative called, Federal Risk and Authorization Management Program (FedRAMP), is aimed to develop a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services through standardized security requirements and controls.

“FedRAMP is a government-wide effort, and represents the efforts of the Department of Defense (DoD), the Department of Homeland Security (DHS), the General Services Administration (GSA), the National Institute of Standards and Technology (NIST), and the Office of Management and Budget (OMB), amongst many others.”

Some key FedRAMP benefits include:

Saves significant cost, time and resources—do once, use many times
Improves real-time security visibility
Supports risk-based security management
Provides transparency between government and cloud service providers (CSPs)
Improves trustworthiness, reliability, consistency, and quality of the federal security authorization process

The full policy meme is located here on CIO.gov website.

By CircleID Reporter

CircleID’s internal staff reporting on news tips and developing stories. Do you have information the professional Internet community should be aware of? Contact us.

Visit Page

Filed Under

Comments

Are you sure the link is correct? Stefano Canepa – Dec 11, 2011 9:28 PM

I think the correct document to link for the cloud policy is: http://www.cio.gov/fedrampmemo.pdf.

# 1 Reply | Link | Report Problems

Re: Are you sure the link is correct? Admin – Dec 11, 2011 10:04 PM

Thank you for your feedback. The link has been corrected.

# 2 Reply | Link | Report Problems

The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

VINTON CERF
Co-designer of the TCP/IP Protocols & the Architecture of the Internet