President Donald Trump signed a memorandum Wednesday revoking the security clearance of former CISA leader Chris Krebs, with the White House saying he was a “significant bad-faith actor who weaponized and abused his government authority” during his time leading the agency. The order also suspends any active security clearance held by employees at SentinelOne, where…
Category: FedRAMP
FedRAMP, Global Security News, Security Bloggers Network
CMMC vs FedRAMP: Do They Share Reciprocity?
Throughout this blog, we often write about both FedRAMP and CMMC as cybersecurity frameworks applied to the federal government and its contractors. These frameworks share a lot of the same DNA stemming from the same resources, and they share the same goal of making the federal government more secure. One significant question you may have,…
FedRAMP, Global Security News, Security Bloggers Network
Continuous Monitoring Guide: FedRAMP Meets Zero Trust
Security isn’t something you implement once and leave alone. It’s a mindset, an operation, and an ongoing policy. Security frameworks like FedRAMP require a process called continuous monitoring in order to remain valid. The world of information threats is constantly evolving. Technology grows, changes, and improves, but with those changes come new vectors for intrusion,…
Blog, FedRAMP, Global Security News, OMB, OSCAL, Security Bloggers Network
Making FedRAMP ATOs Great with OSCAL and Components
OMB Memo M-24-15 published on July 24, 2024 directed GSA and the FedRAMP PMO to streamline the FedRAMP ATO process using NIST OSCAL. By late 2025 or early 2026 (18 months after the issuance of the memo), GSA must ensure the ability to receive FedRAMP authorization and continuous monitoring artifacts through automated, machine-readable means. Additionally,…