The Federal Risk and Authorization Management Program saw the number of cloud security packages reused by agencies increase by 132 percent from fiscal year 2020 to FY 2022. FedRAMP reported a total
More
The Federal Risk and Authorization Management Program has received from a cloud service provider the first system security plan in a machine-readable format called Open Security Controls Assessment Language. FedRAMP expects the
More
The Federal Risk and Authorization Management Program (FedRAMP) office has updated materials that educate companies about the requirements for developing a cloud security package. The revision of FedRAMP's System Security Plan Required
More
The Federal Risk and Authorization Management Program has worked with industry and the National Institute of Standards and Technology to develop the Open Security Controls Assessment Language to help automate the authorization
More
The National Security Agency’s office of inspector general has released a semi-annual report to Congress of its independent oversight work carried out from April 1, 2018 to Sept. 30, 2018. NSA Inspector
More
The Defense Department has requested public insight on its draft procurement guidance that requires the adoption of a National Institute of Standards and Technology rule that safeguards controlled unclassified information in non-federal
More
The General Services Administration’s 18F organization has developed a tool that aims to help federal information security personnel continuously update their system security plans with code in an effort to manage risks
More