GovForward's 6th Annual ATO and Cloud Security Summit!

Close the gap! That’s the new policy push for the Federal Risk and Authorization Management Program. FedRAMP was established to help standardize the government’s approach to using cloud service offerings. Between July 2019 and April 2023, agencies increased the number of authorizations by roughly 60 percent, expanding from core infrastructure to encompass a diverse landscape of software applications.

However, with growth comes complexity, and the Government Accountability Office (GAO) has highlighted areas fit for improvement – noting agency use of non-FedRAMP services and the need for consistent cost structures among Cloud Service Providers (CSPs), along with a call for guidance to better navigate FIPS 140-3 cryptographic requirements. To help bridge these gaps, the Office of Management and Budget (OMB) is finalizing new guidance informed by government and industry feedback.

During the 2024 GovForward: ATO and Cloud Security Summit, attendees heard  from experts about the improved program changes and understand how advancements at the federal level are impacting the broader public sector market, including the Department of Defense and state & local governments.

Attendees left with a better understanding of:

• New FedRAMP guidance from the Office of Management and Budget
• The strategic Emerging Technology Prioritization Framework and its potential to propel AI (Artificial Intelligence) authorizations forward.
• Efforts to streamline and automate the Authority to Operate (ATO) process DoD guidance and updates for Impact Levels 4, 5, and 6 (IL4, IL5, and IL6)
• New guidance on how CSPs can navigate cryptographic requirements contained in the Federal Information
• Processing Standard (FIPS 140-3)
• What’s next for StateRAMP and TX-RAMP, the Texas Risk and Authorization Management Program