Users
Links
Accreditations
StateRAMP (Approved)
StateRAMP is a state government led program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services based on the FedRAMP program.
FedRAMP (Approved)
The Federal Risk and Authorization Management Program (FedRAMP) is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services.
DoD-Wide (Approved)
DoD-Wide is a process sponsored by the U.S. Department of Defense to assess and authorize commercially-operated cloud services for use by the Department of Defense and its components. It provides a standardized approach for security assessment, authorization, and continuous monitoring based on the FedRAMP program.
Standards
NIST 800-171
NIST 800-171 is a set of security guidelines and controls designed by the National Institute of Standards and Technology (NIST) to enhance the protection of Controlled Unclassified Information (CUI) in non-federal systems and organizations.
FIPS 140-2
FIPS 140-2 is a federal standard issued by the National Institute of Standards and Technology (NIST) that defines security requirements for cryptographic modules used to protect sensitive information, ensuring they meet specific security standards and capabilities. The information security community has occasionally disputed the efficacy of the standard due to concerns that the certification process may not always align with the latest security threats and that it can be slow to adapt to evolving cryptographic technologies.