How to Get FedRAMP Authorized

Course details

If you're a cloud service provider (CSP) looking to sell your cloud services offering (CSO) to the United States federal government, they need to be FedRAMP Authorized. FedRAMP is a high-security risk management framework. It allows a CSO to be authorized to be accepted for use by all United States Federal Government Agencies. The FedRAMP process is rigorous and encompasses three levels: low, medium, high, and custom. In this course, information security and compliance expert Debra Baker guides you through the rigorous process of the FedRAMP authorization, including the continuous reporting and monitoring required after authorization is granted.

If you're an engineer, manager, or developer currently embarking on a FedRAMP project, this class is tailored for you. Join Debra as she breaks down FedRAMP in an easy-to-understand manner, demystifying the authorization process and explaining how to start the FedRamp journey.

Concepts

0. Introduction

01 - How to get FedRAMP authorized
02 - FedRAMP - What you should know

1. Introduction to FedRAMP

03 - What is FedRAMP
04 - Why is FedRAMP important
05 - FedRAMP definitions
06 - FedRAMP key stakeholders

2. Getting Started with FedRAMP

07 - FedRAMP authorization path - Agency vs. JAB P-ATO
08 - Choose your FedRAMP level
09 - FedRAMP authorization impact levels

3. Preparing for FedRAMP

10 - GAP analysis and readiness assessment
11 - FedRAMP agency and JAB-PTO pre-authorization process

4. FedRAMP Authorization Process

12 - FedRAMP full security assessment
13 - FedRAMP agency and JAB-PTO authorization process

5. Post-Authorization Process

14 - FedRAMP continuous monitoring - ConMon overview
15 - FedRAMP continuous monitoring - ChangeMgmt
16 - FedRAMP continuous monitoring - IncidentResponse
17 - FedRAMP continuous monitoring - VulnerabilityManagement
18 - FedRAMP continuous monitoring - InternalReporting
19 - FedRAMP continuous monitoring - Deliverables

Conclusion

20 - Next steps