FedRAMP Authorization
What is FedRAMP Authorization?
The formal process through which a cloud service provider obtains approval to offer its services to US federal agencies. FedRAMP authorization requires implementing NIST SP 800-53 controls and assessment by a Third Party Assessment Organization.
Terms that appear alongside fedramp authorization
Each of these is named in at least one of the same controls as fedramp authorization. The number is how many controls name both.
- authorization 8 shared controls
- fedramp 8 shared controls
- nist 4 shared controls
- incident response 4 shared controls
- governance 3 shared controls
- fisma 3 shared controls
- policy 3 shared controls
- baseline 3 shared controls
Frameworks that govern fedramp authorization
What the standards actually require on fedramp authorization
Requirements naming fedramp authorization across 3 standards, quoted from the control text.
Each agency must continuously diagnose and mitigate cyber threats and vulnerabilities associated with its use of cloud offerings, regularly review the continuous monitoring materials providers deliver and give timely, actionable feedback to manage risk to the...
fedramp-rev-5::G.10 · G.10 Agency duties on oversight, metrics and cost →Information system Security Management and Assessment Program (ISMAP) Japan - the Japanese government cloud security assessment program launched June 2020 (formal operations began 1 January 2021) + replaces older Common Cloud Procurement Guidelines + similar i...
ISMAP-Scope-2020Launch-MIC-METI-NISC-ISMAP-LIU-Standard-Critical-Tiers-CloudServiceList-Registration · ISMAP Scope + 2020 Launch + MIC/METI/NISC Tri-Ministry Governance + Cloud Service List + 3 Tiers (LIU + Standard + Critical) + ISMAP-LIU Simplified Assurance + Government Procurement Eligibility →Apply NIST SP 800-144 Guidelines on Security and Privacy in Public Cloud Computing published December 2011 + companion to NIST SP 800-145 + NIST SP 800-146 + FedRAMP + DoD Cloud Security Requirements Guide.
NISTSP144-1 · Cloud Governance, Risk Assessment, and Provider Trust Evaluation →Questions people ask about fedramp authorization
What is FedRAMP Authorization?
Why is FedRAMP Authorization important for compliance?
Which compliance frameworks address FedRAMP Authorization?
Where can I learn more about FedRAMP Authorization?
See how FedRAMP Authorization applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.