FedRAMP SSP - Start yours today!

The FedRAMP System Security Plan is the 1st step to FedRAMP Certification.

BEGIN YOUR FedRAMP JOURNEY NOW!

Full Name*
Business Email*
Company*
Phone Number*
Country*
Comments
This field is for validation purposes and should be left unchanged.

ControlCase is a global provider of IT Certification and Continuous Compliance services.

FedRAMP aims to ensure the confidentiality, integrity and availability of federal information. The ControlCase solution starts by helping you identify where the federal information is being stored, processed and transmitted by the system / service to be provided to federal clients. We then work with you to describe the applicable FedRAMP controls and evidence required to build the FedRAMP SSP.

As a 3PAO, ControlCase will independently verify and validate the control implementation and test results for your organization, using a four-phase approach. Each phase will have a specific set of tasks and deliverables required to guide you, through the FedRAMP Joint Authorization Board (JAB) Provisional Authorization to Operate (P-ATO) process.

Our offerings enable clients to effectively manage their IT Governance, Risk Management and Compliance Management efforts

1 FedRAMP Scoping & Remediation Support

2 Automated Evidence Collection & On-time compliance

3 Partnership Approach – Avoid Checkbox Auditors!

Contact us today!

USA +1.703.483.6383

CANADA +1.416.900.1272

UK / EUROPE +44.734.120.5513

INDIA / GULF REGION +91.22.50323006

ASIA PACIFIC +66.21056164

FREQUENTLY ASKED QUESTIONS

What is FedRamp?

The Federal Risk and Authorization Management Program, known as FedRAMP, is one of the federal government’s most rigorous security compliance frameworks. FedRAMP uses the NIST SP 800-53 standard as a security baseline. NIST includes the data security guidance set by the National Institute of Standards (also responsible for maintaining and updating FISMA compliance.)

Why is FedRAMP Important.

FedRAMP enables the federal government to accelerate the adoption of cloud computing by creating transparent standards and processes for security authorizations. It provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services used by federal agencies. Thereby, delivering a cost-effective and risk-based approach for government agencies to adopt and use of cloud services.

What are the FedRAMP Entities?

1. Joint Authorization Board (JAB)
JAB is the primary governance and decision-making body for FedRAMP. Its members include the chief information officers (CIOs) from the Department of Defense, Department of Homeland Security, and General Services Administration.
2. Program Management Office (PMO)
Resides within GSA and supports agencies and cloud service providers through the FedRAMP authorization process. PMO also maintains a secure repository of FedRAMP authorizations to enable reuse of security packages.

What is FedRAMP Marketplace?

The FedRAMP Marketplace is maintained by the FedRAMP Program Management Office (PMO). It serves as a database of Cloud Service Offerings (CSOs) that have achieved a FedRAMP designation and Accredited Auditors (known as 3PAOs) that can perform the FedRAMP assessment.
ControlCase is a FedRAMP Third Party Assessment Organization (3PAO). The 3PAO status qualifies ControlCase to assist cloud providers in achieving FedRAMP compliance and verifies that ControlCase has the technical competence required by FedRAMP to assist cloud providers in achieving FedRAMP certification.

Who does FedRAMP Apply to?

FedRAMP applies to any cloud services that hold federal data must be FedRAMP Authorized. FedRAMP prescribes the security requirements and processes cloud service providers must follow for the government to use their service.

How to achieve FedRAMP Compliance & FedRAMP Certification

Security Expertise – Complying with Federal Security Requirements is no easy task. It is important to find a knowledgeable partner that can assist in creating and implementing controls for security, compliance and certification to regulations including FedRAMP, NIST 800-53 and FISMA.
Collaborate – Ensure all business stakeholders are involved early and often. This will enable the prompt handing of strategic components and other key logistics on an ongoing basis.
Commitment – Ensure all stakeholders understand, agree and acknowledge the benefits of coming FedRAMP certified. Establishing this will drive commitment to the project and ensure accountability.
Engage Leadership – Gaining buy-in from the highest levels of the organization as early as possible will help ensure resource allocation, budget and commitment from the rest of the team.