--- title: What is FedRAMP? description: FedRAMP is here, and with cloud computing taking over, it’s affecting every federal agency. Find out what it means for you and for cloud providers. image: https://blog.augustschell.com/hubfs/what-is-fedramp.png --- [Skip to content](https://blog.augustschell.com/what-is-fedramp#main-content) [![August Schell Logo](https://blog.augustschell.com/hubfs/ase-logo-2022-color-notag.svg "August Schell Logo")](http://augustschell.com) - [Services](https://augustschell.com/services/) Show submenu for Services - [Professional Services Offerings](https://augustschell.com/services-offering/) - Solutions Show submenu for Solutions - [Security](https://augustschell.com/home-security-solutions/) - [Big Data](https://augustschell.com/home-solutions-data/) - [Resources](https://augustschell.com/resources/) - [Company](https://augustschell.com/about-us/) Show submenu for Company - [Customers](https://augustschell.com/customers/) - [Partners](https://augustschell.com/partners/) - [Joint Ventures](https://augustschell.com/home-company-joint-ventures/) - [Contracts](https://augustschell.com/contracts-2/) - [Where to Find Us](https://augustschell.com/home-company-news/) - [About Us](https://augustschell.com/about/) - [Contact](https://augustschell.com/contact/) - [Quotes](https://augustschell.com/quotes/) Open main navigation Close main navigation - [Services](https://augustschell.com/services/) Show submenu for Services - [Professional Services Offerings](https://augustschell.com/services-offering/) - Solutions Show submenu for Solutions - [Security](https://augustschell.com/home-security-solutions/) - [Big Data](https://augustschell.com/home-solutions-data/) - [Resources](https://augustschell.com/resources/) - [Company](https://augustschell.com/about-us/) Show submenu for Company - [Customers](https://augustschell.com/customers/) - [Partners](https://augustschell.com/partners/) - [Joint Ventures](https://augustschell.com/home-company-joint-ventures/) - [Contracts](https://augustschell.com/contracts-2/) - [Where to Find Us](https://augustschell.com/home-company-news/) - [About Us](https://augustschell.com/about/) - [Contact](https://augustschell.com/contact/) - [Quotes](https://augustschell.com/quotes/) - [Careers](https://augustschell.com/careers/) [Careers](https://augustschell.com/careers/) Apr 3, 2018 7:22:00 AM # What is FedRAMP? [Ron Flax](https://blog.augustschell.com/author/ron-flax) Share: [facebook-f icon](http://www.facebook.com/share.php?u=https://blog.augustschell.com/what-is-fedramp) [linkedin-in icon](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.augustschell.com/what-is-fedramp) [Twitter icon](https://twitter.com/intent/tweet?url=https://blog.augustschell.com/what-is-fedramp) [pinterest-p icon](http://pinterest.com/pin/create/link/?url=https://blog.augustschell.com/what-is-fedramp) [envelope icon](mailto:?body=https://blog.augustschell.com/what-is-fedramp) ## What FedRAMP Means for Agencies and Cloud Providers **What is FedRAMP, and Why Does it Matter?** If you’re in IT, particularly in the federal space, then you’ve heard of [FedRAMP](https://www.fedramp.gov/). What is it, and what are the implications to federal agencies? Recently, cloud computing has become far more widely used throughout the federal government. Though hesitant at first to keep pace with the adoption rate of the enterprise, federal agencies are transitioning from traditional IT infrastructures to the cloud with increasing frequency. Sights are set on reducing the upfront cost of infrastructure, improving scalability, and improving ease of maintenance and reliability of overall systems. However, the [security](https://augustschell.com/it-infrastructure-solutions/cyber-security-solutions/) implications of moving toward cloud platforms aren’t as black and white. Here’s where FedRAMP comes in. Essentially, it’s a standardized review process for cloud computing platforms and services. The goal, as explained by FedRAMP, is to simplify security in [the age of digitalization](https://augustschell.com/lightspeed-impacts-digital-transformation/) by providing a consistent methodology for cloud security when cloud computing platforms and services are used by or within federal agencies. It contains a set standard of roles, security controls and an overall standardized review process of cloud environments and their respective platforms, which allows federal agencies to more easily seek out validated cloud resources to satisfy their specific needs. These same rules apply to an agency’s home grown cloud resources as well, should they decide to build their own cloud infrastructure and services vs buying from a qualified cloud services provider. FedRAMP compliant providers opt for undergoing the review process to make themselves available to public sector customers. However, completing the FedRAMP process requires a sponsoring agency which intends on using that providers cloud resources. FedRAMP allows agencies to identify a cloud service provider quickly and as one of its requirements, enforces [continuous monitoring](https://augustschell.com/it-infrastructure-solutions/cyber-security-solutions/#emm) of the cloud computing platform and services. Agencies are better positioned to understand and assume the risk of using the cloud environment they’re entering, as well as being kept informed of potential changes to the platform, thus helping mitigate new risks that may be introduced later. **…But It’s Not Just About Infrastructure or the CSPs.** Another factor to consider for any federal agency moving workloads to the cloud: IaaS is one thing, and it’s what most people think of when it comes to cloud, but there are other cloud assets that are also subject to FedRAMP. Microsoft’s Office 365 and Google’s G-Suite are prime examples; these tools have to be as compliant as infrastructure does, and they are. Both of these Software as a Service offerings are indeed FedRAMP compliant and offer a way for federal agencies to utilize cloud resources right away. It’s also important to note that while FedRAMP reviews CSPs for compliance, federal agencies themselves are responsible for assuming and ultimately mitigating risk as well as obtaining FedRAMP authorization. When applied properly, it’s estimated that the framework saves 30-40% of government authorization costs by means of reducing the time and resources needed to execute security assessments. If you’re in the beginning stages of moving to the cloud, you should start by clearly defining mission needs and requirements. Based on what you’re looking to achieve, begin researching potential providers, particularly those within the FedRAMP marketplace who have already achieved compliance with other sponsors. **Continuous Monitoring with Splunk and Other Solutions to Help You with FedRAMP** As mentioned above, part of the FedRAMP accreditation process requires continuous monitoring of a set of security controls defined by NIST. To ease this burden, Splunk has released multiple apps to help with continuous monitoring and becoming FedRAMP compliant, including an app plugin that helps platform providers execute risk assessment of their cloud platform. Additionally, enlisting the support of seasoned [engineering consultants](https://augustschell.com/it-infrastructure-services/consultation/) to help with your FedRAMP certification in an advisory capacity is also an option worth considering. In addition, there are many tools and products available for addressing security and documentation requirements. Do you need more information on how FedRAMP applies to you? August Schell can assist with continuous monitoring and risk management by custom tailoring a solution set that will meet your FedRAMP requirements. We’re also here to answer your FedRAMP questions. [Reach out to an August Schell specialist now](https://augustschell.com/contact-us/), or call us at (301)-838-9470. [Compliance](https://blog.augustschell.com/tag/compliance), [federal compliance](https://blog.augustschell.com/tag/federal-compliance), [fedramp](https://blog.augustschell.com/tag/fedramp) ## Related posts [![cloud-backups](https://blog.augustschell.com/hs-fs/hubfs/cloud-backups.png?height=200&name=cloud-backups.png)](https://blog.augustschell.com/cloud-backups-an-introductory-cloud-use-case-worth-considering) [Cloud](https://blog.augustschell.com/tag/cloud), [cloud backups](https://blog.augustschell.com/tag/cloud-backups), [rubrik](https://blog.augustschell.com/tag/rubrik) ## [Cloud Backups: An Introductory Cloud Use Case Worth Considering](https://blog.augustschell.com/cloud-backups-an-introductory-cloud-use-case-worth-considering) [Ron Flax](https://blog.augustschell.com/author/ron-flax) Jan 3, 2019 8:33:00 AM A Brief Intro on Backing Up to the Cloud Backups as a Segue into the Cloud [Read more](https://blog.augustschell.com/cloud-backups-an-introductory-cloud-use-case-worth-considering) [![automation](https://blog.augustschell.com/hs-fs/hubfs/automation.jpg?height=200&name=automation.jpg)](https://blog.augustschell.com/three-tips-for-automating-workflows-with-cloudbolt) ## [Three Tips for Automating Workflows with CloudBolt](https://blog.augustschell.com/three-tips-for-automating-workflows-with-cloudbolt) [Admin](https://blog.augustschell.com/author/admin) Dec 3, 2018 10:09:00 AM Making the Most of CloudBolt Workflow Automation Capabilities Why CloudBolt is a Great Tool for... [Read more](https://blog.augustschell.com/three-tips-for-automating-workflows-with-cloudbolt) [![vmware-cloud-aws-govcloud](https://blog.augustschell.com/hs-fs/hubfs/vmware-cloud-aws-govcloud.jpg?height=200&name=vmware-cloud-aws-govcloud.jpg)](https://blog.augustschell.com/vmware-cloud-on-aws-govcloud) [Amazon Web Services](https://blog.augustschell.com/tag/amazon-web-services), [VMware](https://blog.augustschell.com/tag/vmware), [GovCloud](https://blog.augustschell.com/tag/govcloud), [VMware cloud](https://blog.augustschell.com/tag/vmware-cloud) ## [VMware Cloud on AWS GovCloud](https://blog.augustschell.com/vmware-cloud-on-aws-govcloud) [Ron Flax](https://blog.augustschell.com/author/ron-flax) Jun 26, 2018 9:30:33 AM VMware Cloud on AWS GovCloud is the “easy button” for migrating workloads to a FedRAMP authorized... [Read more](https://blog.augustschell.com/vmware-cloud-on-aws-govcloud) --- Talk to an Expert `Today.` *[![Contact Us](https://no-cache.hubspot.com/cta/default/4039791/interactive-182720921209.png)](https://blog.augustschell.com/hs/cta/wi/redirect?encryptedPayload=AVxigLL9LraoJtIBgrYlE%2FKyjCO4yI%2F9a7gnlaahvEm8ADCbcs5LiatjdUCgi%2Fry6MzUEKTQJ68W%2F7%2B84MdIxn4CNymfscl%2BXFT%2FjLhnUspX4dk470k4n%2BaXJc%2BE7T%2BNX4SktIzr7yk6hsZ8TpsMvOcSxr78FbynJ6CCp3yJSw5QC1wPZZFqig%3D%3D&webInteractiveContentId=182720921209&portalId=4039791)* | Quick Links [Request Quote](https://augustschell.com/quotes/) [Careers](https://augustschell.com/careers/) [Contracts](https://augustschell.com/contracts/) | 1700 Rockville Pike, Suite 405, Rockville MD 20852 (301) 838-9470 [![Screenshot 2024-11-12 at 10.57.50 AM](https://blog.augustschell.com/hs-fs/hubfs/Screenshot%202024-11-12%20at%2010.57.50%20AM.png?width=110&height=22&name=Screenshot%202024-11-12%20at%2010.57.50%20AM.png)](https://www.linkedin.com/company/august-schell-enterprises) | | --- | --- |   | **August Schell** | [Privacy Policy](https://augustschell.com/privacy-policy/) · [Contact Us](https://augustschell.com/contact/) | All rights reserved | | --- | --- | --- |