CCAK · Question #18
Which of the following is a fundamental concept of FedRAMP that intends to save costs, time, and staff conducting superfluous agency security assessments?
The correct answer is D. Do once, use many times. FedRAMP's core philosophy is 'Do once, use many times.' A cloud service provider undergoes a single rigorous security assessment and authorization process. Once authorized, any U.S. federal agency can reuse that Authorization to Operate (ATO) rather than each agency independently
Question
Which of the following is a fundamental concept of FedRAMP that intends to save costs, time, and staff conducting superfluous agency security assessments?
Options
- AUse often, provide many times
- BBe economical, act deliberately
- CUse existing, provide many times
- DDo once, use many times
How the community answered
(51 responses)- B4% (2)
- C2% (1)
- D94% (48)
Explanation
FedRAMP's core philosophy is 'Do once, use many times.' A cloud service provider undergoes a single rigorous security assessment and authorization process. Once authorized, any U.S. federal agency can reuse that Authorization to Operate (ATO) rather than each agency independently assessing the same cloud system. This eliminates duplicative security reviews across dozens of agencies using the same CSP, dramatically reducing the cost, time, and personnel burden of federal cloud security compliance while maintaining a standardized baseline of security controls.
Topics
Community Discussion
No community discussion yet for this question.