An overview of fedramp certification requirements Fedramp certification (The Federal Risk and Authorization Management Program) was established by the American government in 2011. What is fedramp? The security procedures required to protect sensitive government data while dealing with cloud service providers were addressed by the establishment of this set of security standards. These CSPs must comply with the evaluation, authorization, and continuous monitoring procedures outlined by fedramp compliance in order to be given permission to engage with federal agencies. What Are the FedRAMP Compliance Requirements? A commercial cloud service offering (CSO) must prove that it complies with all fedramp risk assessment compliance criteria before a federal agency can use it. What is fedramp certification? The fedramp continuous monitoring Program Management Office supplements NIST 800-53, the industry's gold standard for security, with additional information about these criteria (PMO). The fedramp compliant Authority to Operate, which is provided to the cloud service provider (CSP), grants authorization (fedramp ato). More on this in a moment. To become authorized by the fedramp readiness assessment and comply with its regulations, fedramp certified vendors must fulfill the following highlevel criteria: ● Fedramp certifications and documentation, including the fedramp certified SSP, are completed ● the implementation of controls that are FIPS 199 compliant ● An organization certified under FedRAMP's Third Party Assessment Program will evaluate commercial cloud products ● Making a fedramp 3pao plan of action and setting milestones (POA&M) ● Obtain a Provisional ATO (P-ATO) or fedramp auditor ATO from the Joint Authorization Board (JAB). ● Continuous Monitoring (ConMon) program implementation, with monthly vulnerability scans