Agencies to Security Industry: Automate Cloud Compliance Faster

Agencies to Security Industry: Automate Cloud Compliance Faster

While it is a well-worn adage that the federal government is slow to modernize their IT environments, facts today are telling a different story. Not only are agencies the largest consumer of cloud solutions, Coalfire’s recent research shows that 33% more infrastructure as a service, platform as a service and software as a service cloud solutions were approved for government use in 2018 than the year before—and agencies are consuming them, spending 32% more year over year in 2018 across all cloud offering types. More than 150 government agencies are now using FedRAMP-authorized clouds, with 44 using 10 or more unique clouds. We predict this trend will continue. 


The move to cloud is likely a response to the government’s “Cloud First” policy initially announced by the Office of Management and Budget in 2011, which directs departments and agencies to utilize cloud-based computing solutions whenever possible. The Federal Risk and Authorization Management Program, better known as FedRAMP, is a chief enabler of this transformation, establishing cybersecurity requirements and a certification process for cloud service providers wishing to deliver solutions to the federal market. Today, the federal government is asking the industry to more aggressively employ automation in their FedRAMP compliance programs so that agency customers can adopt and consume cloud innovations even faster. 


In a recent House of Representatives hearing to discuss improvements to the FedRAMP program and proposed legislation—the FedRAMP Reform Act—designed to achieve that goal, agency officials urged ..

Support the originator by clicking the read the rest link below.