December 2017 Articles

FedRAMP Weekly Tips- December 14, 2017

This week, FedRAMP published two questions and answers. One for Cloud Service Providers (CSPs) and one for Third Party Assessment Organizations (3PAOs): Cloud Service Providers (CSPs) Q: How should a CSP address platform scope within the System Security Plan (SSP)? A: There are multiple platforms/platform groups in a system as identified by the inventory. A platform has...

FedRAMP Weekly Tips- December 7, 2017

This week, FedRAMP published two questions and answers. One for Cloud Service Providers (CSPs) and one for Third Party Assesment Organizations (3PAOs): Cloud Service Providers (CSPs) Q: I referenced a document in my System Security Plan (SSP), but did not provide the referenced document because it contains proprietary or sensitive information. How will this affect my...