The Business Benefits of Outsourcing FedRAMP Compliance

By Ryan Gilhooley, Enterprise Cloud Solutions Manager

If you are new to the federal government market, you are no doubt wrestling with how to ensure your products and services are compliant with the Federal Risk and Authorization Management Program (FedRAMP). This government-wide program standardizes security assessment, authorization and continuous monitoring for cloud products and services.

If you’re making a decision to move forward with FedRAMP authorization, it’s important to understand your options from the beginning. It’s tempting to try to do it all yourself, but the complexities of compliance can quickly send the cost of doing it yourself sky high, while delaying your time to market by years.

Getting to authorization requires deep expertise in compliance, IT security, engineering and more, which means a heavy investment of expensive resources extended over a long period of time.

For example, many ISVs don’t understand that hosting their software applications in a FedRAMP-compliant cloud does not make the actual applications FedRAMP authorized. To earn FedRAMP authorization for software as a service, both the environment and the application must be authorized. Read more of this post

3 Ways Industry Can Help Government Cloud Adoption

Lloyd McCoy Jr.By Lloyd McCoy Jr., DOD Manager

If you attended our recent Cloud Briefing & GCloud Briefing 41216-3overnment Panel, you likely heard a recurring message from the federal leaders who spoke: They need help from industry.

Moving to the cloud has been a bigger challenge than expected as summed up by Office of the DOD CIO cloud lead Robert Vietmeyer, who spoke on our government panel: “This stuff is hard. Leadership is bought into your marketing pitch,” he told attendees, largely representing cloud providers. “We all want better, faster, cheaper. We just found it’s more difficult to get from where we are today to where we all want to be.”

Read more of this post

%d bloggers like this: