FedRAMP

The Federal Risk and Authorization Management Program authorizes cloud services for use by U.S. federal agencies. Authorizations are issued at Low, Moderate, or High impact levels. FedRAMP engagements

The Federal Risk and Authorization Management Program authorizes cloud services for use by U.S. federal agencies. Authorizations are issued at Low, Moderate, or High impact levels. FedRAMP engagements are expensive ($250K–$2M for initial authorization) and lengthy (12–24 months), but unlock the federal market.

Key controls

• NIST SP 800-53 control baseline
• Continuous monitoring
• Annual security assessment
• Incident reporting to US-CERT