Both vendors and Federal officials said today they want more visibility into the Federal Risk and Authorization Management Program (FedRAMP) process, which certifies the security of cloud technologies for Federal government use and is operated by the General Services Administration (GSA)…
From the Federal government side, David Catanoso, director of the Enterprise Cloud Solutions Office at the Department of Veterans Affairs (VA) – and who is now responsible for application hosting cloud-native solutions – also agreed more visibility would be beneficial…
Catanoso went on to say that when it comes to the VA’s cloud-related products, one of the criteria the agency uses is whether it is FedRAMP certified or not – which further illustrates the need for visibility into the process.
“If it’s not, it doesn’t mean that we wouldn’t consider a product, but it adds time to the process and we’d have to invest resources either to potentially sponsor a FedRAMP certification or see if another agency is in the process,” he said. “That goes back to my suggestion about getting better visibility to what’s in flight, because that would help us understand where the market’s going to be in six to 12 months from now and help us plan.” … Read the full article here.