• “Cloud First”: To move federal agencies to the cloud, the government created a program known as FedRAMP, whose job was to ensure the security of new technology.
  • Security Breakdown: ProPublica found that FedRAMP authorized a Microsoft product called GCC High to handle sensitive government data, despite years of concerns about its security.
  • Potential Conflict of Interest: The government relies, in part, on third-party firms to vet cloud technology, but those firms are hired and paid by the company being assessed.
you are viewing a single comment's thread
view the rest of the comments
[–] 0 points 5 months ago

Fun fact, the law actually does not lay out a single technical "must do".

But rather establish liabilities and defines miss use. Which is NOT the same as proper use.

  • source
  • parent