Cloud-Based IT Risk Management

Th Fdrl Rsk nd thrztn Mngmnt Prgrm (FdRMP) s ntd Stts fdrl gvrnmnt-wd cmplnc prgrm tht prvds stndrdzd pprch t scrty ssssmnt, thrztn, nd cntns mntrng fr cld prdcts nd srvcs. n 2011, th ffc f Mngmnt nd Bdgt (MB) rlsd mmrndm stblshng FdRMP "t prvd cst-ffctv, rsk-bsd pprch fr th dptn nd s f cld srvcs t xctv dprtmnts nd gncs." Th Gnrl Srvcs dmnstrtn (GS) stblshd th FdRMP Prgrm Mngmnt ffc (PM) n Jn 2012. Th FdRMP PM mssn s t prmt th dptn f scr cld srvcs crss th fdrl gvrnmnt by prvdng stndrdzd pprch t scrty nd rsk ssssmnt. Pr th MB mmrndm, ny cld srvcs tht hld fdrl dt mst b FdRMP thrzd. FdRMP prscrbs th scrty rqrmnts nd prcsss tht cld srvc prvdrs mst fllw n rdr fr th gvrnmnt t s thr srvc. Thr r tw wys t thrz cld srvc thrgh FdRMP: Jnt thrztn Brd (JB) prvsnl thrztn (P-T), nd thrgh ndvdl gncs. Bfr th ntrdctn f FdRMP, ndvdl fdrl gncs mngd thr wn ssssmnt mthdlgs fllwng gdnc st by th Fdrl nfrmtn Scrty Mngmnt ct f 2002. FdRMP prvds ccrdttn fr cld srvcs fr th vrs cld ffrng mdls whch r nfrstrctr s Srvc (S), Pltfrm s Srvc (PS), nd Sftwr s Srvc, (SS).