Do I Need to be Concerned with FedRamp?
Well, that depends...
FedRAMP requirements apply to all federal agencies?when federal information is collected, maintained, processed, disseminated, or disposed of by Cloud Service Providers (CSPs)1. Its main purpose is to provide a standardized approach to cloud security assessments so that agencies can use modern technology while still protecting and securing federal information.
So, unless your company sells cloud services and wants to sell to the government, then you most likely won’t need to worry about FedRamp.
Hopefully, that’s some good news for you!
Pro Advice: DFARS 252.204-702b(2)(ii)(D) does not require the use of a FedRamp certified CSP
- Kloud9 IT