CIO Insights & Innovation
Security & Risk Strategy
Team Building & Staffing
IT Strategy
Digital Business
Project Management
Programming Languages
Dr. Dobb's
Enterprise Applications
Operating Systems
Productivity/Collaboration Apps
Network Security
Careers & People
Threat Intelligence
IoT
Attacks & Breaches
Application Security
Cloud Security
Endpoint Security
Mobile Security
Perimeter Security
Risk Management
Operations Security
Analytics
Vulnerabilities & Threats
Security & Risk Strategy
Infrastructure as a Service
Platform as a Service
Software as a Service
Cloud Storage
Data Centers
Mobile Applications
Mobile Devices
Mobile Business
Enterprise Mobility Management
Big Data Analytics
Hardware/Architectures
Software Platforms
IoT
Networking
Storage
Wireless Infrastructure
Data Center
Unified Communications
Cloud Infrastructure
Applications
Careers
PCs and Servers
Net Security
Government
Healthcare
Wall Street & Technology
Bank Systems & Technology
Insurance & Technology
Industries
Government
Healthcare
Wall Street & Technology
Bank Systems & Technology
Insurance & Technology
IT Life
Mobile
Mobile Applications
Mobile Devices
Mobile Business
Enterprise Mobility Management
Software
Enterprise Applications
Operating Systems
Productivity/Collaboration Apps
Comments
Defense CIO Takai: Why FedRAMP Helps Everyone
Newest First  |  Oldest First  |  Threaded View
WKash
50%
50%
WKash,
 User Rank: Author
1/22/2014 | 12:29:06 PM
Re: FedRAMP vs DOD's standards
Chris, you raise a fair point that FedRAMP isn't an easy thing to grasp and that its branding message could use some work. In this case, Defense CIO Takai was talking about the use of the FedRAMP certification, and its logo, and the need for FedRAMP-authorized services to follow some clear cut rules on how they promote the FedRAMP seal of approval.  The problem is similar to what other certification groups (ISO certification comes to mind) where its important to police how firms promote the certifications they've earned.

 
ChrisMurphy
50%
50%
ChrisMurphy,
 User Rank: Author
1/22/2014 | 9:48:00 AM
Re: FedRAMP vs DOD's standards
Ms. Takai talks about using the FedRAMP brand. I don't have a good feel for what that brand stands for, though, to would-be cloud buyers. Does it convey security, reliability, ease of use, or more narrowly "government-readiness"? Or something else?  
WKash
50%
50%
WKash,
 User Rank: Author
1/21/2014 | 6:13:25 PM
FedRAMP vs DOD's standards
One of the open questions about FedRAMP and its adoption at the Department of Defense revolves around FedRAMP's reliance on the NIST 800-53 standards while DOD's still relies on its own DIACAP IT certifcation standards.

I asked Teri Takai about that.  She told me that the Defense Department is close to finallzing recommendations to shift from the  DIACAP process to the NIST standard.  It's part of a broader decision to move away from unique DOD standards to more broad-based standards, including NIST's standards. Not surprisingly, the recommendations are getting a heavy legal review at the Pentagon.

 

 


Register for InformationWeek Newsletters
White Papers
Current Issue
Top IT Trends to Watch in Financial Services
IT pros at banks, investment houses, insurance companies, and other financial services organizations are focused on a range of issues, from peer-to-peer lending to cybersecurity to performance, agility, and compliance. It all matters.
Download This Issue!
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
Join us for a roundup of the top stories on InformationWeek.com for the week of September 18, 2016. We'll be talking with the InformationWeek.com editors and correspondents who brought you the top stories of the week to get the "story behind the story."
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.