Author
This week, FedRAMP published QA and a tip that discusses POA&Ms and inventory: Q: What constitutes a unique finding for Plan of Actions & Milestones (POA&M) reporting and how should CSPs group related findings on the POA&M? A: The weakness identifier, asset identifier, and original detection date are elements that constitutes a new finding. If vulnerabilities are...
The process to obtain an Azure FedRAMP ATO is time consuming, manual, and paper-intensive. Until now! Introducing ATO as a Service™, an exclusive Software as a Service that automates FedRAMP processes, and shortens FedRAMP ATO timeframes for information systems hosted in the Azure Government Cloud. cFocus Software has partnered with Microsoft Corporation to develop the offering,...
The US public sector contains unique and highly evolving requirements. To respond to the unique nature of the requirements, Microsoft offers many government sectors and eligible organizations Office 365 Government to manage their business by the federal laws stipulated. For many government agencies, using Microsoft Office 365 or Azure gives companies a huge boost when...
This week, FedRAMP published a weekly tip that discusses the use of non-US persons support and updating SSP officials: TIP: A CSP using non-US persons to support their system is FedRAMP compliant, but will find their market limited among Federal agencies. Using non-US persons to support a FedRAMP system is a business decision the CSP must...
With the popular Groups feature added to Office 365 Government recently, the internal tools available are extremely practical. As a whole, Groups opens new doors to superior communication and collaboration with fellow government employees. Although one particular feature lets your team collaborate with people outside your organization. Known as Guest Access, you’ll want to know...
This week, FedRAMP published two tips that discuss Cloud Service Offering Assessments and the requirements for a security assessment report and readiness assessment report: TIP: What does a typical Third Party Assessment Organization (3PAO) Team performing a Cloud Service Offering (CSO) assessment look like according to FedRAMP? FedRAMP requires that all assessments must be staffed by an...
One thing you can bet on with Azure Government is constant updates from Microsoft every month of the year. This year has some of the biggest updates in the history of this popular cloud software. In March, one new exciting add to Azure Government was Publish to Web, an inside feature through the recently added...
One thing you can count on with Microsoft is their focus on improving product security. While they improved their Windows 10, Office365 has had vast improvements as well. Those of you starting to use Office 365 Government may want to look into a recent feature added called Threat Intelligence, released earlier this month. It’s a...
This week, FedRAMP published a weekly tip that discusses requirements for vulnerability scanning: Q: What are the FedRAMP requirements for vulnerability scanning? A: Vulnerability scanning must occur for Operating System (OS)/ infrastructure, databases, and web application components in the Cloud Service offering authorization boundary. The scanning parameters for the components must be defined in the Security...
When Cognitive Services became available for Azure Government recently, it opened up so many great features that government offices now appreciate. Your own government office can currently enjoy API’s encompassing everything from Vision recognition to academic knowledge. In-between, you shouldn’t overlook other tools helping you manage various media within your agency. Recently, we explored what...