FedRAMP
FedRAMP is the authorization program a cloud service has to clear before federal agencies are permitted to buy it. It applies to any company selling software as a service into the federal market, and what it asks for is continuous rather than a one time exercise. Verdict operates that package on your behalf, maintaining the system security plan, the findings and remediation record, and the evidence behind them through authorization and the monitoring that follows.
A detailed guide is on the way
We are preparing a fuller resource on this framework, covering what it asks for, what the record has to show, and how an engagement runs against it. In the meantime, talk to a consultant and we will walk you through how we would approach it for your organization.
Federal Authorization
What an agency, or a company selling to one, has to satisfy before a system can operate or be bought.
Working toward FedRAMP?
Verdict runs the compliance work and gives you a portal to review it. Tell us where you are and we will tell you what the engagement would look like.
Talk to a Consultant