Accelerating Cybersecurity for US Critical Infrastructure with FedRAMP

Accelerating Cybersecurity for US Critical Infrastructure with FedRAMP

| | Blog, CMMC, FedRAMP, StateRAMP
Accelerating Cybersecurity for US Critical Infrastructure Guest post By Gaurav Pal, Principal and Founder, stackArmor, Inc. Disruptions in gasoline supplies due to the cyberattack on the Colonial Pipeline in May 2021 transformed cybersecurity attacks from an “online problem” to a national security concern. This seminal event resulted in the release of ... Read More
dlp and zero trust

Implementing Data Diode Pattern on AWS for Data Loss Prevention (DLP) and Zero Trust Access Control

| | Blog, data diode, DLP, zero trust
Author: Matt Venne, Solutions Director, stackArmor, Inc. One of the biggest challenges that cloud architects and security professionals have is protecting “sensitive” data.  This challenge is multiplied when that sensitive data must move between different systems for analysis and consumption.  Data security is difficult in such a dynamic scenario that ... Read More
How to prepare for initial FedRAMP ATO kickoff and Agency briefing?

How to prepare for initial FedRAMP ATO kickoff and Agency briefing?

Federal and Defense Agencies are increasingly buying commercial cloud services to meet their mission requirements. Commercial cloud solution providers must obtain FedRAMP authorization prior to offering their services to agencies. The FedRAMP Kickoff Briefing Guidance is critical to help prepare for the authorization process ... Read More
Jan 2023 – FedRAMP, StateRAMP and CMMC 2.0 Roundup

Jan 2023 – FedRAMP, StateRAMP and CMMC 2.0 Roundup

| | Blog, CMMC, FedRAMP, StateRAMP
There were a number of significant activities in January 2023 related to FedRAMP, StateRAMP and CMMC 2.0 marketplace. As part of the FedRAMP Authorization Act, The General Services Administration (GSA) issued a call for nominations for the Federal Secure Cloud Advisory Committee (FSCAC). FSCAC is a statutory advisory committee in ... Read More

DoD Cloud Authorization To Operate (ATO) and Impact Levels (IL2, IL4, IL5, IL6) Explained

| | Blog, DoD ATO, DOD IL4, DOD IL5
US Government and Department of Defense agencies are continuing to modernize and transform operations using modern commercial cloud computing services. A recent report on the Federal Cloud Computing Market predicts that demand for commercial cloud computing goods and services will grow to nearly $19 Billion by 2024. A significant growth ... Read More

Preparing for FedRAMP Certification and Authorization

| | Blog, fedramp certification
FedRAMP is a government-wide program that promotes the adoption of secure cloud services across the federal government by providing a standardized approach to security and risk assessment for cloud technologies and federal agencies. Commercial cloud service providers wanting to sell their services to US Federal Agencies, their contractors or suppliers ... Read More

Accelerate FedRAMP Compliance with Amazon Web Services (AWS)

FedRAMP (Federal Risk and Authorization Management Program) is a government-wide program that streamlines the assessment, authorization and continuous-monitoring (ConMon) requirements for cloud-based IT services. It is how the federal government ensures that its cloud IT services do not put sensitive data or systems at unnecessary risk. Bottom line, Cloud Service ... Read More

What is FedRAMP POAM? FedRAMP Compliance and Certification Explained

| | Blog, fedramp poam, OSCAL
The Federal Risk and Authorization Management Program was established in 2011 to provide a cost-effective, risk-based approach for the adoption and use of commercial cloud services by the federal government and contractors supporting agencies. FedRAMP promotes the adoption of secure cloud services by providing a standardized approach to security and ... Read More

What is the FedRAMP Marketplace? Certified and Compliant Cloud Services

| | Blog, fedramp ato
The FedRAMP Marketplace provides a searchable and sortable database of Cloud Service Providers (CSP) that have FedRAMP compliant services as well as a list of federal agencies using FedRAMP Authorized CSOs, and FedRAMP recognized auditors (3PAOs) that can perform a FedRAMP assessment. The FedRAMP Marketplace is maintained by the FedRAMP ... Read More

What is FedRAMP Certification?

FedRAMP (Federal Risk and Authorization Management Program) is a government-wide program that streamlines the assessment, authorization and continuous-monitoring (ConMon) requirements for cloud-based IT services. It is how the federal government ensures that its cloud IT services do not put sensitive data or systems at unnecessary risk. Bottom line, Cloud Service ... Read More