Federal officials and vendors will be getting more advice about the Federal Risk and Authorization Management Program (FedRAMP) in the form of a new website, new training modules and procurement guidance to help them incorporate security authorizations in cloud contracts.<\/p>\n\n\n\n
“We’re looking to change the user experience with FedRAMP,” program director Matt Goodrich said during a panel discussion hosted by the Association for Federal Information Resources Management (AFFIRM) on Feb. 19.<\/p>\n\n\n\n
The new FedRAMP.gov website will be launching next month, incorporating a new design that will make it easier for interested parties to find the information they need.<\/p>\n\n\n\n
The FedRAMP program office has been in talks with stakeholders about what they’d like to see in a new site and even reached out to disinterested civilians \u2014 in the form of Goodrich’s friends \u2014 to see how the average person navigates the current site.<\/p>\n\n\n\n
“Most of our information is actually in all of our documents,” Goodrich said. However, “We don’t really have a 100,000-foot view of FedRAMP on our website right now. Functionally, what is FedRAMP \u2026 we’re making sure we have that high level view.”<\/p>\n\n\n\n
The new site will also launch with a training module to help vendors and government agencies understand what FedRAMP is and how to begin the process. This first module will be “high level,” Goodrich said, explaining how the process works and how agencies and vendors interact with the program.<\/p>\n\n\n\n
There will only be one module at first but the PMO expects to launch several more over the next few months and continue to develop new training programs as needed.<\/p>\n\n\n\n
“Coming into the security process for any vendor is very difficult. And for many of the agencies, getting into the cloud is a little scary because it’s definitely a different way of using IT services,” Goodrich said. “So as we have those lessons-learned, why don’t we just share those and make sure it’s out there in a way that people can do it at their own speed?”<\/p>\n\n\n\n
Ultimately, Goodrich hopes to offer a whole catalog of training modules to address every aspect of the FedRAMP process.<\/p>\n\n\n\n
Finally, the FedRAMP PMO is working on new procurement guidance that will give agencies a template for including FedRAMP in future contracts and solicitations.<\/p>\n\n\n\n
The guidance will be “loosely based off of the modular IT guidance that came out through OMB,” Goodrich explained. “This is what security authorizations are, this is what FedRAMP compliance means. Then through the uniform contract format, here are considerations in each area for FedRAMP and talking points on how to incorporate them in there and sample language that people can put in there.”<\/p>\n\n\n\n
The draft guidance is still in development, though Goodrich said stakeholders can expect to see a request for comment soon.<\/p>\n\n\n\n
Once finalized, it will likely be included in one of the future training modules, as well.<\/p>\n","protected":false},"excerpt":{"rendered":"
Agencies and vendors will get access to a new training module and assistance with contract language in the next few weeks.<\/p>\n","protected":false},"author":7,"featured_media":37812,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":63,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[63,15,14],"tags":[],"coauthors":[2349],"class_list":["post-12476","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud","category-management","category-it-networks"],"acf":{"subheadline":"","legacy_arc_id":"LJ5HDFDENRCCNLBLBJWACV6B7Q","arc_canonical_url":"\/it-networks\/cloud\/2015\/02\/19\/new-website-procurement-guidance-coming-for-fedramp\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n