FedRAMP increases pace of Connect prioritizations
- By Sara Friedman
The Federal Risk and Authorization Monitoring Program has taken another step to facilitate authorizations through the FedRAMP Connect program, which speeds approvals for high-demand services.
To reduce the time between cloud service providers being prioritized by FedRAMP Connect and kicking off assessments with the Joint Authorization Board, FedRAMP will prioritize three CSPs each quarter, rather than making biannual selections.
“It won’t impact our timelines to get to an authorization,” FedRAMP Director Matt Goodrich said at a June 13 ATARC event. “We simply want to increase the pace at which we are selecting vendors so there is less lag time between when we prioritize and assess them in the JAB.”
While 70 percent of FedRAMP authorizations are the result of software-as-a-service providers working directly with an agency, the JAB process involves a board with CIOs from the Department of Defense, Department of Homeland Security and the General Services Administration who determine which SaaS solutions can benefit the most federal agencies. Each vendor must submit a business case to be considered for the FedRAMP Connect program.
FedRAMP also released new guidance for the JAB process. When creating a business case, demand is the primary driver for prioritization, and SaaS providers must be able to prove that six customers are interested in using their tools.
SaaS providers should also be able to show that their solutions are designed for the government, have a proven track record of managing risk and secure implementations and meet the needs of agencies. Information on crafting business cases can be found here.
Business cases for this round of FedRAMP Connect are due on July 13.
Sara Friedman is a reporter/producer for GCN, covering cloud, cybersecurity and a wide range of other public-sector IT topics.
Before joining GCN, Friedman was a reporter for Gambling Compliance, where she covered state issues related to casinos, lotteries and fantasy sports. She has also written for Communications Daily and Washington Internet Daily on state telecom and cloud computing. Friedman is a graduate of Ithaca College, where she studied journalism, politics and international communications.
Friedman can be contacted at firstname.lastname@example.org or follow her on Twitter @SaraEFriedman.
Click here for previous articles by Friedman.