CCAK · Question #75
A CSP providing cloud services currently being used by the United States federal government should obtain which of the following to assure compliance to stringent government standards?
The correct answer is B. FedRAMP Authorization. FedRAMP (Federal Risk and Authorization Management Program) is the US government's mandatory standardized security assessment and authorization framework specifically designed for cloud products and services used by federal agencies. Any CSP serving the US federal government…
Question
A CSP providing cloud services currently being used by the United States federal government should obtain which of the following to assure compliance to stringent government standards?
Options
- AMulti-Tier Cloud Security (MTCS) Attestation
- BFedRAMP Authorization
- CISO/IEC 27001:2013 Certification
- DCSA STAR Level Certificate
How the community answered
(26 responses)- B92% (24)
- C4% (1)
- D4% (1)
Explanation
FedRAMP (Federal Risk and Authorization Management Program) is the US government's mandatory standardized security assessment and authorization framework specifically designed for cloud products and services used by federal agencies. Any CSP serving the US federal government must obtain FedRAMP Authorization. MTCS is a Singapore government standard. ISO/IEC 27001 is a globally recognized certification but is not sufficient alone for US federal requirements. CSA STAR addresses cloud security broadly but is not a US government compliance program.
Topics
Community Discussion
No community discussion yet for this question.