- FedRAMP: Cloud Controls to Manage Risk
-
Just like I did for FISMA, I wanted to review the Federal Risk and Authorization Management Program Security Controls (FedRAMP), and provide you with my view of it. As stated on GSA’s website, FedRAMP is “a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. ...
Read More... - Bits & Bytes: Interview with Mischel Kwon
-
Note: Bits & Bytes is a new reoccurring column featuring interesting figures in the security industry. The intent is to provide a quick interview that allows readers to learn more about the interview subject and their views of our industry. This edition features Mischel Kwon. About Mischel: Mischel Kwon is an IT executive with more ...
Read More... - NIST SP800-144 Guidelines on Security and Privacy in Public Cloud Computing – A Relationship Manual
-
Participating in a public cloud means that there are two independent parties involved. When two parties are involved, a relationship is formed. And just as it happens with any kind of relationship – each party has their own expectations. If they don’t get met – feelings might get hurt. Arguments and frustrations are normal, and ...
Read More...