Collaborate Disseminate
I just stumbled upon this fedramp document: https://www.fedramp.gov/assets/resources/templates/FedRAMP-Moderate-Readiness-Assessment-Report-(RAR)-Template.docx
It contains the following note in 4.2.2 Transport Layer Security:
Note: DHS BO… Continue reading Why does Fedramp disallow TLS 1.2 via HSTS?
I’m looking for a FedRAMP compliant SIP trunking service for an IVR solution. Any suggestions?
Continue reading Suggestions for a FedRAMP compliant SIP Trunking Service Provider?
Is it possible to use Private Certificate Authority based on Microsoft Windows Servers for protection SSL/TLS connections in FedRAMP environment on Google Cloud?
Continue reading Google Cloud and Private CM on Microsoft Windows and FedRamp compliance for TLS
Context
My company is developing a SaaS solution that needs to conform to PCI-DSS L1 for sure, and possibly FedRAMP and other frameworks later.
We can do continuous deployment with feature flagged/canary releases, with multiple releases a … Continue reading Do I need to keep production Docker/container images?
Is the use of a private, auto-signed certificate, created and managed by AWS Private CM, and use in internal TLS communication, for endpoints that do not require external verification, and do not have external access, in compliance with Fe… Continue reading AWS Private CM and FedRamp compliance for TLS
Is the use of a private, auto-signed certificate, created and managed by AWS Private CM, and use in internal TLS communication, for endpoints that do not require external verification, and do not have external access, in compliance with Fe… Continue reading AWS Private CM and FedRamp compliance for TLS
If I use MD5 but not for cryptography purposes, and not for any authentication or authorization mechanism, Am I in violation of FedRamp Moderate?
Continue reading FedRamp Moderate question about hashing MD5
Zscaler Internet Access – Core of the Zscaler Zero Trust Exchange – Prioritized for Authorization to Secure the Government’s Most Sensitive, Unclassified Data in Cloud Environments by FedRAMP Connect SAN JOSE, Calif., Feb. 02, 2021 (GLOBE N… Continue reading Zscaler Internet Access Prioritized for FedRAMP Joint Authorization Board Certification at High Impact Level
Even before the COVID-19 pandemic, there was a growing trend and transformation of enterprises and government agencies moving applications to the cloud. We’ve seen that trend accelerate dramatically as organizations have scrambled to ensure their worke… Continue reading Why Real-World ROI Matters to Software Vendors Pursuing FedRAMP in 2021
Chances are, you’re already late. As cloud-based software vendors adapt to the new normal of a COVID economy, many have pivoted to the public sector for new opportunities and business growth. However, for many business leaders, it shouldn’t come as a … Continue reading The Hard Truth About Federal 2021 Bid Deadlines for Cloud-Based Software Vendors