Executive Insights & Innovation
Team Building & Staffing
IT Strategy
Digital Business
Enterprise Agility
Enterprise Applications
Information Management
Operating Systems
Productivity/Collaboration Apps
Social
Attacks & Breaches
Application Security
Cloud Security
Endpoint Security
Mobile Security
Perimeter Security
Risk Management
Operations Security
Analytics
Vulnerabilities & Threats
Infrastructure as a Service
Platform as a Service
Software as a Service
Cloud Storage
Mobile Applications
Mobile Devices
Mobile Business
Big Data Analytics
Hardware/Architectures
Software Platforms
Networking
Storage
Wireless Infrastructure
Data Center
Unified Communications
Cloud Infrastructure
Applications
Careers
PCs and Servers
Big Data/Analytics
Cloud Computing
Cybersecurity
Enterprise Architecture
Leadership
Mobile & Wireless
Open Government
Electronic Health Records
Mobile & Wireless
Analytics
Policy & Regulation
Leadership
Security & Privacy
Clinical Systems
Patient Tools
Comments
Defense CIO Takai: Why FedRAMP Helps Everyone
Newest First  |  Oldest First  |  Threaded View
WKash
50%
50%
WKash,
 User Rank: Author
1/22/2014 | 12:29:06 PM
Re: FedRAMP vs DOD's standards
Chris, you raise a fair point that FedRAMP isn't an easy thing to grasp and that its branding message could use some work. In this case, Defense CIO Takai was talking about the use of the FedRAMP certification, and its logo, and the need for FedRAMP-authorized services to follow some clear cut rules on how they promote the FedRAMP seal of approval.  The problem is similar to what other certification groups (ISO certification comes to mind) where its important to police how firms promote the certifications they've earned.

 
ChrisMurphy
50%
50%
ChrisMurphy,
 User Rank: Author
1/22/2014 | 9:48:00 AM
Re: FedRAMP vs DOD's standards
Ms. Takai talks about using the FedRAMP brand. I don't have a good feel for what that brand stands for, though, to would-be cloud buyers. Does it convey security, reliability, ease of use, or more narrowly "government-readiness"? Or something else?  
WKash
50%
50%
WKash,
 User Rank: Author
1/21/2014 | 6:13:25 PM
FedRAMP vs DOD's standards
One of the open questions about FedRAMP and its adoption at the Department of Defense revolves around FedRAMP's reliance on the NIST 800-53 standards while DOD's still relies on its own DIACAP IT certifcation standards.

I asked Teri Takai about that.  She told me that the Defense Department is close to finallzing recommendations to shift from the  DIACAP process to the NIST standard.  It's part of a broader decision to move away from unique DOD standards to more broad-based standards, including NIST's standards. Not surprisingly, the recommendations are getting a heavy legal review at the Pentagon.

 

 


Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Tech Digest, Dec. 9, 2014
Apps will make or break the tablet as a work device, but don't shortchange critical factors related to hardware, security, peripherals, and integration.
Download This Issue!
Subscribe Now!
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
InformationWeek Live for the Week of February 22, 2015
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.