The General Services Administration has introduced a new category for its Federal Risk and Authorization Management Program to highlight cloud systems proven FedRAMP ready.
Dubbed “FedRAMP Ready” systems, the new category will “allow potential agency customers and authorizing officials a starting point to initiate an authorization,” according to the FedRAMP Cloud.cio.gov website. These cloud service providers (CSPs), to be featured on the FedRAMP website, differ from others in that they have been reviewed by the FedRAMP project management office (PMO), Matt Goodrich, acting FedRAMP director for GSA, said in a statement.
“As more and more cloud services enter the FedRAMP assessment process, FedRAMP is providing more information to help agencies and CSPs achieve a FedRAMP authorization faster,” Goodrich said. “FedRAMP Ready systems have documentation that has been reviewed by the FedRAMP PMO and at a minimum have gone through the FedRAMP PMO readiness review process.”
At publication, just four cloud systems were listed on the FedRAMP website with varying degrees of demonstrated readiness. The elements of readiness featured with them will give agencies a jumping off point for their cloud procurement process, Goodrich said. “Agencies can use this documentation to initiate an assessment and authorize these systems in a faster time than starting from scratch.”