FedRAMP August 2014 Request for Public Comment on Program Requirements

Added: Aug 21, 2014 3:25 pm THIS IS A REQUEST FOR INFORMATION ONLY.  This announcement is posted for data gathering and planning purposes only. It DOES NOT constitute a solicitation, and is not to be construed as a commitment by the Government to issue a solicitation or award a contract. The Government will not reimburse any respondent for any cost associated with information submitted in response to this RFI. The purpose of this notice is to allow the vendor community the opportunity to provide feedback, input, and changes to FedRAMP documentation and program requirements.

Wednesday, August 18, 2014 the FedRAMP PMO posted four documents for ​30 day public comment to end September 19, 2014.

 The FedRAMP PMO is seeking stakeholder input on these documents in order to ensure maximum applicability and positive impact for agencies, cloud service providers, and third part y​ assessors.

 ​The four documents the PMO requests input on are as follows:

•·          Incident Response Requirements and Process Clarification

•·          Vulnerability Scanning Requirements and Process Clarification 

•·          FedRAMP Continuous Monitoring Reporting and POA&M Template

•·          Evolution of FedRAMP Continuous Monitoring Framework 

The FedRAMP PMO will post all documentation open for public comment at http://cloud.cio.gov/topics/requests-public-comment​.

ALL RESPONSES ARE TO BE SUBMITTED BY 5:00PM EST SEPTEMBER 19, 2014. Please note that feedback need not be provided in any specific format.