FedRAMP proposes changes to 3PAO standards

Federal Times: The Federal Risk and Authorization Management Program is considering modifying its standards for approving third-party organizations to serve as evaluators of potential cloud computing offerings.

These third-party assessment organizations (3PAOs) have been a cornerstone of the FedRAMP program since its beginnings 3.5 years ago. They examine the cloud offerings that companies would like to market to the federal government and determine whether they meet the baseline security requirements to be acceptable.

Read article