National Archives and Records Administration (NARA) Cloud Computing Day

National Archives and Records Administration's(NARA) Office of Information Services will host a Cloud Computing Day on Thursday, June 21st to include a technology exposition centered around cloud technology. Sessions on Cloud Computing and Cloud Technology will be held in conjunction with the expo with speakers coming from the following agencies; NIST, GSA, OMB, and NARA. Exhibitors are invited to attend all sessions.

The focus of NARA's Cloud Computing Day will be on the Federal Risk and Authorization Management Program (FedRAMP), a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. This approach uses a “do once, use many times” framework that will save cost, time, and staff required to conduct redundant agency security assessments. FedRAMP was established on December 8, 2011 via an official memorandum from the Federal Chief Information Officer to all agency CIOs. FedRAMP will achieve Initial Operating Capability (IOC) within 180 days.

Ron Ross, NIST, will discuss the Risk Management Framework and how it applies to managing security risks in the cloud environment.  Katie Lewin, GSA, will discuss the FedRamp initiative, and what agencies and program managers need to know about FedRamp and how it facilitates cloud acquisitions.  Jason Baron, NARA, will discuss the legal and regulatory implications of storing PII and federal records in the cloud.

Attendee invitations will be sent to the National Archives in DC, Government Printing Office, NIST, NSA, PG Plaza and the FDA; including 50 local area CIO's.

NARA continues to enhance perimeter defenses, access control, remote access, incident response capability, and system security configurations; and update their personnel to be consistent with revised National Institute of Standards and Technology (NIST) guidelines.