FedRAMP Releases Updated Security Assessment Plan Templates

“Cash for Clunkers” Should Have Used the Cloud!

By G C Network | August 24, 2009

Rich Bruklis wrote an excellent essy on how the government missed a perfect opportunity to use cloud computing. In “Cloud Opportunity Missed” he writes: “It appears that the voucher system…

US Navy Experiments With Secure Cloud Computing

By G C Network | August 20, 2009

This week in San Diego, CA the US Navy held the initial planning conference for Trident Warrior ’10. The Trident Warrior series is the premier annual FORCEnet Sea Trial Event…

GSA To Present On Cloud Initiative at NCOIC Plenary

By G C Network | August 13, 2009

A General Services Administration (GSA) representative is now scheduled to provide a briefing on the agency’s cloud computing initiative during a “Best Practices for Cloud Initiatives using Storefronts” session on…

FAA CIO Focuses on Cybersecurity

By G C Network | August 12, 2009

During this week Federal Executive Forum, FAA CIO Dave Bowen mentioned protection against software vulnerabilities, wireless intrusion and website vulnerabilities as his top cybersecurity priorities. As the Assistant Administrator for…

DHS Asst. Secretary Addresses Cybersecurity Priorities

By G C Network | August 11, 2009

Greg Schaffer, Assistant Secretary for CyberSecurity & Communications for the US Department of Homeland Security, sees Trusted Internet Connections, EINSTEIN, and front line defense of the nation’s networks as top…

US DoD Chief Security Officer on Cybersecurity Priorities

By G C Network | August 10, 2009

In a Federal Executive Forum interview, Robert Lentz, Chief Security Officer for the US Department of Defense, highlighted the departments cybersecurity priorities. Mr. Lentz is the Deputy Assistant Secretary of…

Twitter Under Denial of Service Attack

By G C Network | August 6, 2009

Multiple sources are reporting that Twitter continues to be under a denial of service attack. Some are speculating that this represents the power of a coordinated bot network attack. For…

NCOIC Holding Full Day Cloud Computing Session

By G C Network | August 5, 2009

The Network Centric Operations Industry Consortium (NCOIC) will be holding a one-day cloud computing session during its plenary meetings, 21-25 September at the Fair Lakes Hyatt in Fairfax, VA. A…

Sevatec a New Player in the Federal Cloud Computing Market

By G C Network | August 3, 2009

Just in time for the new Federal Cloud Computing Storefront, Sevatec, Inc. is announcing the development of a toolkit to help federal agencies transform their enterprise architectures to cloud computing…

GSA Releases Cloud Computing RFQ

By G C Network | July 31, 2009

Following through on a much anticipated action, GSA released their Cloud Computing Request For Quotation (RFQ) today. Cloud computing is a major part of President Obama’s reform effort and this…

Last week the GSA FedRAMP Program Office released the latest version of the cloud computing Security Assessment Plan (SAR) template.  This document is the most recent step toward the Federal governments goal of establishing FedRAMP initial operating Capability by June 2012.
The Federal Risk Authorization Management Program (FedRAMP) is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for Cloud Service Providers (CSP). Testing security controls is an integral part of the FedRAMP security authorization requirements and enables Federal Agencies to use the findings that result from the tests to make risk-based decisions. Providing a plan for security control ensures that the process runs smoothly. This document has been designed for CSP Third-Party Independent Assessors (3PAOs) to use for planning security testing of CSPs. Once filled out, this document constitutes a plan for testing. Actual findings from the tests are to be recorded in FedRAMP security test procedure workbooks and a Security Assessment Report (SAR).

This release also includes templates for:

Bookmark and Share

Cloud Musings on Forbes
( Thank you. If you enjoyed this article, get free updates by email or RSS – KLJ )

Follow me at https://Twitter.com/Kevin_Jackson

G C Network

3 Comments

  1. Term papers on May 11, 2012 at 9:22 am

    Good Article About FedRAMP Releases Updated Security Assessment Plan Templates

    Post by:
    https://twitter.com/#!/term_paperz



  2. cloud ways on August 7, 2012 at 11:00 am

    Cloud Computing Really Works and What are its Benefits for Ordinary Users is really impressive. The benifts of cloud computing are explained in such a easy manner. Ordinary users will surely implement cloud computing with help of this blog. Thanks for sharing such valuable information.

    Drupal Hosting I Cloud For Developers



  3. cloud ways on August 7, 2012 at 11:03 am

    Thanks for sharing this such a great information.I really appreciate your work i share this link to my facebook friend as well as Digg and twitter this info helps to everyone

    OsCommerce Cloud Hosting I Moodle Cloud Hosting