Brian Conrad, acting director of the Federal Risk and Authorization Management Program, said his office will work to further simplify cloud security assessment and approval processes through automation while ensuring that vendors
More
Software company VMware has attained approval for government usage of several cloud-based applications at the high-impact level through the Federal Risk and Authorization Management Program. Thanks to confirmation via FedRAMP High Authorization, the
More
Gordian announced on Wednesday that the leading provider of robust technology and services in all phases of the building lifecycle, has achieved the FedRAMP Moderate Provisional-Authority in order to Operate (P-ATO) from
More
The Federal Risk and Authorization Management Program has released an updated version of its guidance for organizations planning to conduct a penetration test. FedRAMP said Tuesday the updated Penetration Testing Guidance includes
More
The Federal Risk and Authorization Management Program has added two new columns to the Plan of Actions and Milestones template to help agency partners track findings related to the Cybersecurity and Infrastructure
More
The Cybersecurity and Infrastructure Security Agency has released the second version of “Cloud Security Technical Reference Architecture” in an effort to provide guidance for secure cloud migration. CISA said Thursday the document
More
Devo Technology announced on Monday that since the cloud-native logging and security analytics company was designed as “In-Progress” for full authorization through the Federal Risk and Authorization Management Program (FedRAMP) back in
More
The Federal Risk and Authorization Management Program has received from a cloud service provider the first system security plan in a machine-readable format called Open Security Controls Assessment Language. FedRAMP expects the
More
Palo Alto Networks announced on Thursday that the company’s IoT Security solution has achieved Federal Risk and Authorization Management Program (FedRAMP) Moderate Authorization. “As cyberattacks become more frequent and sophisticated, the IoT Security
More
The Defense Information Systems Agency (DISA) has cleared a cloud-based CrowdStrike technology product to support cybersecurity of the Department of Defense’s controlled unclassified data. CrowdStrike received one-year provisional authorization to operate that
More