Comments
Defense CIO Takai: Why FedRAMP Helps Everyone
Oldest First  |  Newest First  |  Threaded View
WKash
50%
50%
WKash,
User Rank: Author
1/21/2014 | 6:13:25 PM
FedRAMP vs DOD's standards
One of the open questions about FedRAMP and its adoption at the Department of Defense revolves around FedRAMP's reliance on the NIST 800-53 standards while DOD's still relies on its own DIACAP IT certifcation standards.

I asked Teri Takai about that.  She told me that the Defense Department is close to finallzing recommendations to shift from the  DIACAP process to the NIST standard.  It's part of a broader decision to move away from unique DOD standards to more broad-based standards, including NIST's standards. Not surprisingly, the recommendations are getting a heavy legal review at the Pentagon.

 

 
ChrisMurphy
50%
50%
ChrisMurphy,
User Rank: Author
1/22/2014 | 9:48:00 AM
Re: FedRAMP vs DOD's standards
Ms. Takai talks about using the FedRAMP brand. I don't have a good feel for what that brand stands for, though, to would-be cloud buyers. Does it convey security, reliability, ease of use, or more narrowly "government-readiness"? Or something else?  
WKash
50%
50%
WKash,
User Rank: Author
1/22/2014 | 12:29:06 PM
Re: FedRAMP vs DOD's standards
Chris, you raise a fair point that FedRAMP isn't an easy thing to grasp and that its branding message could use some work. In this case, Defense CIO Takai was talking about the use of the FedRAMP certification, and its logo, and the need for FedRAMP-authorized services to follow some clear cut rules on how they promote the FedRAMP seal of approval.  The problem is similar to what other certification groups (ISO certification comes to mind) where its important to police how firms promote the certifications they've earned.

 


The Business of Going Digital
The Business of Going Digital
Digital business isn't about changing code; it's about changing what legacy sales, distribution, customer service, and product groups do in the new digital age. It's about bringing big data analytics, mobile, social, marketing automation, cloud computing, and the app economy together to launch new products and services. We're seeing new titles in this digital revolution, new responsibilities, new business models, and major shifts in technology spending.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Tech Digest - July 22, 2014
Sophisticated attacks demand real-time risk management and continuous monitoring. Here's how federal agencies are meeting that challenge.
Flash Poll
Video
Slideshows
Twitter Feed
InformationWeek Radio
Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.