FedRAMP, the Federal Risk and Authorization Management Program, was established as a government-wide program on Dec. 8, 2011.
The program standardizes security assessment, authorization, and continuous monitoring for cloud products and services.
Avue has an implemented and maintained System Security Plan (SSP) describing its security program, and how that plan satisfied the security requirements identified by NIST and our Federal Agency Clients, including how improved security-related processes and technologies, such as FedRAMP, are to be incorporated into the contract.
Along with Avue’s Department of Justice sponsor, the company will be pursuing the first government-wide ATO provided by FedRAMP.
The FedRAMP initiative is designed to save cost, time and staff required to conduct redundant agency security assessments. Avue meets all of the FedRAMP requirements for its first round assessment, including being a multitenant cloud offering with existing Federal contracts, clients and active ATOs.