FedRAMP Boundary Guidance: Response to Industry Comment

In May 2018, FedRAMP released guidance informing Cloud Service Providers (CSPs) and agencies on the “rules of thumb” to consider when developing the FedRAMP authorization boundary for their cloud service offering(s). Following its release, the FedRAMP Program Management Office (PMO) accepted comments on the guidance until Friday, June 8th. In response to the comments received from industry partners, the FedRAMP PMO will be hosting two webinars.

During the 45 minute webinar, Matt Goodrich and Ashley Mahan will focus on responding to industry feedback, and address the following:

• What the PMO has seen in CSP authorization boundaries over the last year
• What led to the development and release of authorization boundary guidance
• What the PMO hopes the guidance will address in industry security documentation for FedRAMP
• What industry can expect from the PMO in adopting the guidance

FedRAMP is offering the webinar at two dates and times (all ET), and both webinars will cover the same content.

FedRAMP Authorization Boundary:

• Blog post
• Guidance document (3 pages, 293 kb, PDF)

Who should attend:

This webinar is open to the FedRAMP community, including CPSs, agencies, and Third-Party Assessor Organizations (3PAOs).

Presenters:

Matt Goodrich, Director, FedRAMP As director, Matt manages the FedRAMP PMO and sets the overall direction of the program. As a mandatory government-wide initiative, FedRAMP is one of the leading cloud computing security programs paving the way for cloud adoption and ensuring the security of cloud computing solutions used by the US government.

Ashley Mahan, Agency Evangelist, FedRAMP Ashley is responsible for managing FedRAMP’s agency engagement, outreach, and customer experience activities, which consists of over 130 federal agencies and 150+ industry partners. She leverages collaboration and consensus building as key tools to bring together parties and people, and relishes the opportunity to pave a path towards secure cloud adoption and IT modernization in government for all agencies.