Defense CIO Takai: Why FedRAMP Helps Everyone - InformationWeek
CIO Insights & Innovation
Security & Risk Strategy
Team Building & Staffing
IT Strategy
Digital Business
Project Management
Programming Languages
Dr. Dobb's
Enterprise Applications
Operating Systems
Productivity/Collaboration Apps
Network Security
Careers & People
Threat Intelligence
IoT
Attacks & Breaches
Application Security
Cloud Security
Endpoint Security
Mobile Security
Perimeter Security
Risk Management
Operations Security
Analytics
Vulnerabilities & Threats
Security & Risk Strategy
Infrastructure as a Service
Platform as a Service
Software as a Service
Cloud Storage
Data Centers
Mobile Applications
Mobile Devices
Mobile Business
Enterprise Mobility Management
Big Data Analytics
Hardware/Architectures
Software Platforms
IoT
Networking
Storage
Wireless Infrastructure
Data Center
Unified Communications
Cloud Infrastructure
Applications
Careers
PCs and Servers
Net Security
Government
Healthcare
Wall Street & Technology
Bank Systems & Technology
Insurance & Technology
Industries
Government
Healthcare
Wall Street & Technology
Bank Systems & Technology
Insurance & Technology
IT Life
Mobile
Mobile Applications
Mobile Devices
Mobile Business
Enterprise Mobility Management
Software
Enterprise Applications
Operating Systems
Productivity/Collaboration Apps
Comments
Defense CIO Takai: Why FedRAMP Helps Everyone
Newest First  |  Oldest First  |  Threaded View
WKash
50%
50%
WKash,
 User Rank: Author
1/22/2014 | 12:29:06 PM
Re: FedRAMP vs DOD's standards
Chris, you raise a fair point that FedRAMP isn't an easy thing to grasp and that its branding message could use some work. In this case, Defense CIO Takai was talking about the use of the FedRAMP certification, and its logo, and the need for FedRAMP-authorized services to follow some clear cut rules on how they promote the FedRAMP seal of approval.  The problem is similar to what other certification groups (ISO certification comes to mind) where its important to police how firms promote the certifications they've earned.

 
ChrisMurphy
50%
50%
ChrisMurphy,
 User Rank: Author
1/22/2014 | 9:48:00 AM
Re: FedRAMP vs DOD's standards
Ms. Takai talks about using the FedRAMP brand. I don't have a good feel for what that brand stands for, though, to would-be cloud buyers. Does it convey security, reliability, ease of use, or more narrowly "government-readiness"? Or something else?  
WKash
50%
50%
WKash,
 User Rank: Author
1/21/2014 | 6:13:25 PM
FedRAMP vs DOD's standards
One of the open questions about FedRAMP and its adoption at the Department of Defense revolves around FedRAMP's reliance on the NIST 800-53 standards while DOD's still relies on its own DIACAP IT certifcation standards.

I asked Teri Takai about that.  She told me that the Defense Department is close to finallzing recommendations to shift from the  DIACAP process to the NIST standard.  It's part of a broader decision to move away from unique DOD standards to more broad-based standards, including NIST's standards. Not surprisingly, the recommendations are getting a heavy legal review at the Pentagon.

 

 


How Enterprises Are Attacking the IT Security Enterprise
How Enterprises Are Attacking the IT Security Enterprise
To learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Download Now!
Register for InformationWeek Newsletters
White Papers
Current Issue
Digital Transformation Myths & Truths
Transformation is on every IT organization's to-do list, but effectively transforming IT means a major shift in technology as well as business models and culture. In this IT Trend Report, we examine some of the misconceptions of digital transformation and look at steps you can take to succeed technically and culturally.
Download This Issue!
Video
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll