The Federal Risk and Authorization Management Program (FedRAMP), the government-wide plan to secure cloud products and services, is almost a decade old. It is still evolving, however. Early in 2021, the House of Representative passed a bill that would have codified a number of its provisions into law, standardizing its processes for agencies to on-ramp cloud computing technologies. To date, the Senate has not acted on the bill. At the same tim...

As technology evolves, so do the threats to its security. The remote work shift caused by the continuing pandemic has pressed security teams to reassess how they verify and allow access. Zero Trust is a strategy, not a product, which reimagines the way access is granted to users, to data and to applications. Devices, which used to be central to identity, now include personal computers and home internet connections, which are not government iss...

Eight years in, the Continuous Diagnostic and Mitigation program has matured and broadened its offerings significantly. The focus now is on deploying a threat intelligence framework for governmentwide use, integrating the AWARE risk-scoring algorithm and rolling out of security orchestration automation and response (SOAR) to automate vulnerability detection and defensive cyber operations. More extensive and sophisticated use of data in dashboa...

IT modernization is a leap into the digital future, and cloud computing is its springboard. In the federal sector, cloud is quickening the advancement of mobile technology, data analytics, artificial intelligence, the Internet of Things, agile computing, streamlined development models and advanced cybersecurity. The outcome is growing efficiency and effectiveness in agencies’ missions, improved customer service at agencies seeking to emu...