Defense CIO Takai: Why FedRAMP Helps Everyone - InformationWeek
CIO Insights & Innovation
Security & Risk Strategy
Team Building & Staffing
IT Strategy
Digital Business
Project Management
Programming Languages
Dr. Dobb's
Enterprise Applications
Operating Systems
Productivity/Collaboration Apps
Network Security
Careers & People
Threat Intelligence
IoT
Attacks & Breaches
Application Security
Cloud Security
Endpoint Security
Mobile Security
Perimeter Security
Risk Management
Operations Security
Analytics
Vulnerabilities & Threats
Security & Risk Strategy
Infrastructure as a Service
Platform as a Service
Software as a Service
Cloud Storage
Data Centers
Mobile Applications
Mobile Devices
Mobile Business
Enterprise Mobility Management
AI/Machine Learning
Big Data Analytics
Hardware/Architectures
Software Platforms
IoT
Networking
Storage
Wireless Infrastructure
Data Center
Unified Communications
Cloud Infrastructure
Applications
Careers
PCs and Servers
Net Security
Government
Healthcare
Wall Street & Technology
Bank Systems & Technology
Insurance & Technology
Industries
Government
Healthcare
Wall Street & Technology
Bank Systems & Technology
Insurance & Technology
IT Life
Mobile
Mobile Applications
Mobile Devices
Mobile Business
Enterprise Mobility Management
Software
Enterprise Applications
Operating Systems
Productivity/Collaboration Apps
Comments
Defense CIO Takai: Why FedRAMP Helps Everyone
Newest First  |  Oldest First  |  Threaded View
WKash
50%
50%
WKash,
 User Rank: Author
1/22/2014 | 12:29:06 PM
Re: FedRAMP vs DOD's standards
Chris, you raise a fair point that FedRAMP isn't an easy thing to grasp and that its branding message could use some work. In this case, Defense CIO Takai was talking about the use of the FedRAMP certification, and its logo, and the need for FedRAMP-authorized services to follow some clear cut rules on how they promote the FedRAMP seal of approval.  The problem is similar to what other certification groups (ISO certification comes to mind) where its important to police how firms promote the certifications they've earned.

 
ChrisMurphy
50%
50%
ChrisMurphy,
 User Rank: Author
1/22/2014 | 9:48:00 AM
Re: FedRAMP vs DOD's standards
Ms. Takai talks about using the FedRAMP brand. I don't have a good feel for what that brand stands for, though, to would-be cloud buyers. Does it convey security, reliability, ease of use, or more narrowly "government-readiness"? Or something else?  
WKash
50%
50%
WKash,
 User Rank: Author
1/21/2014 | 6:13:25 PM
FedRAMP vs DOD's standards
One of the open questions about FedRAMP and its adoption at the Department of Defense revolves around FedRAMP's reliance on the NIST 800-53 standards while DOD's still relies on its own DIACAP IT certifcation standards.

I asked Teri Takai about that.  She told me that the Defense Department is close to finallzing recommendations to shift from the  DIACAP process to the NIST standard.  It's part of a broader decision to move away from unique DOD standards to more broad-based standards, including NIST's standards. Not surprisingly, the recommendations are getting a heavy legal review at the Pentagon.

 

 


2018 State of the Cloud
2018 State of the Cloud
Cloud adoption is growing, but how are organizations taking advantage of it? Interop ITX and InformationWeek surveyed technology decision-makers to find out, read this report to discover what they had to say!
Download Now!
Register for InformationWeek Newsletters
White Papers
Current Issue
Cybersecurity Strategies for the Digital Era
At its core, digital business relies on strong security practices. In addition, leveraging security intelligence and integrating security with operations and developer teams can help organizations push the boundaries of innovation.
Download This Issue!
Video
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll