Microsoft provides numerous options for its public cloud offerings. Microsoft 365 Commercial, also known as MS 365 Commercial or Commercial Microsoft 365, is the "standard" cloud. The Commercial cloud version... Read More
Blog
Guide to Implementing an IT Risk Management Framework
Enterprise risk management (ERM) is a disciplined, holistic way to identify, manage, and mitigate risk throughout your entire enterprise. IT risk management (ITRM) is one subset of that effort, focused... Read More
FedRAMP System Security Plan: Tips for Writing an SSP
The Federal Risk and Authorization Management Program (FedRAMP) standardizes how U.S. federal government agencies apply the Federal Information Security Management Act (FISMA) to cloud computing services. Through its "do once,... Read More
Understanding FIPS 140-2 Encryption Requirements to Manage Risk and Achieve FedRAMP Compliance
The Federal Risk and Authorization Management Program (FedRAMP) provides a risk-based approach to help U.S. government agencies adopt and use cloud-based technology services. FedRAMP standardizes the security requirements for cloud... Read More
All You Wanted to Know About the FedRAMP Security Assessment and Risk Management Framework
The Federal Risk and Authorization Management Program (FedRAMP) provides U.S. federal agencies and their vendors with a standardized set of best practices to assess, adopt, and monitor the use of... Read More