Without question, the Federal Government has accurately identified cloud computing as a great opportunity for significant cost savings, flexibility, fast deployment and lower risk of project failure across all agencies. In December 2010, U.S. Chief Information Officer Vivek Kundra unveiled the 25 Point Implementation Plan To Reform Federal Information Technology Management, which lays out an 18-month execution strategy to improve Government efficiency, effectiveness, and service delivery.
One of the key components of the plan is the launch of a “Cloud First” policy, where each agency CIO will be required to begin migration of multiple services to the cloud in the next 12-18 months. Central to the effort to provide a standard approach to Assessing and Authorizing (A&A) cloud computing services and products is FedRAMP (the Federal Risk and Authorization Management Program), a program that proposes to provide joint authorizations and continuous monitoring for government and commercial cloud computing systems intended for multi-agency use.
While it’s a laudable goal to streamline and simplify cloud computing security risk assessment controls across agencies and to ease the certification process, the most recent draft FedRAMP still suffers from being an impractical high-bar approach to achieve the “approve once and use often” goal for cloud computing implementation across agencies. With the clock ticking on the aggressive “Cloud First” implementation timeline, SIIA submitted comments highlighting the various challenges posed by the current proposal. Fortunately, Vivek Kundra and key Federal IT leaders continue to demonstrate a dogged determination to make the cloud first policy a success, so hopefully there’s still time to fix FedRAMP and begin migrating to the cloud.
To that end, SIIA’s Cloud/gov conference couldn’t come at a better time this year, as agency CIOs assess the opportunities and challenges presented by this new policy. On February 17th, the conference will provide a timely opportunity to hear from Federal IT leaders from GSA, NIST and NASA, and talk with colleagues from other agencies about the opportunities and challenges presented by the new Cloud First policy.
For more SIIA policy updates, subscribe to the Digital Policy Roundup, SIIA’s weekly policy email newsletter.
