FedRAMP baseline controls released for Federal Cloud Computing accreditation
Grazed from FierceGovernmentIT. Author: David Perera.
Federal officials released Jan. 6 security controls that constitute the basis of governmentwide authorization and accreditation of cloud computing systems.
The controls (.zip), part of a program known as FedRAMP, are meant to act as a common federal baseline for low- and moderate- risk cloud services. A Dec. 8, 2011 memo (.pdf) from Federal Chief Information Officer Steven VanRoekel tells agencies to use provisional authorization of public cloud computing services granted via an independent third party using FedRAMP criteria when conducting their own risk assessments.
Provisional authorization granted under the FedRAMP program by a third party doesn’t replace agencies’ need to conduct their own risk assessments, federal officials said during a Dec. 8 press call, but should satisfy the vast majority of local security controls. The FedRAMP program office has yet to release a concept of operations with more details, but plans to within a month, said Homeland Security Department Chief Information Officer Richard Spires in a Jan. 6 blog post. Spires has been active in governmentwide efforts…


Shenick Network Systems, provider of per-flow IP communication test and performance measurement solutions, today announced that it is leading the market with an IP test and measurement solution that can operate in a multi-hypervisor environment. Shenick’s diversifEye(TM) Virtual Machine (VM), a virtual, per-flow test solution for cloud computing environments, gives service providers and network equipment manufacturers the ability to emulate and analyze real-time IP traffic in cloud environments for multiple hypervisors right down to each individual application flow.