What Are Core Documents for StateRAMP Authorization?

StateRAMP Documentation Featured

StateRAMP, much like FedRAMP, includes a series of documents that the cloud provider and their 3PAO must complete before they are fully authorized. These documents align with several stages of the assessment process and provide regulating authorities with the proof they need to see that the cloud offering meets requirements. 

Here, we summarize the documents you must complete as part of your StateRAMP assessment process.


Read More

What Is the Open Security Controls Assessment Language (OSCAL)?

Image of XML - OSCAL featured

There’s recently been a push within FedRAMP towards modernizing the framework to meet modern security challenges and better align federal security standards across agencies and technologies. 

Part of this push is standardizing how security controls are measured and assessed, and the most recent blog from FedRAMP mentions a new standard–OSCAL. 

Here, we will discuss OSCAL, why the National Institute of Standards and Technology (NIST) is creating it to address assessments, and how we streamline them. 


Read More

What Is IRS 4812?

IRS 4812 featured

Understanding IRS Publication 4812 is not just about compliance; it’s about upholding a standard of trust and integrity crucial to the IRS’s operations and the taxpayers’ confidence. This relatively new standard addresses how contractors in the federal supply chain handle data specific to the Internal Revenue Service (IRS) and its mission of maintaining the privacy of citizens’ information. 

This article will cover the basics of IRS 4812, including what it is and the bird’s-eye view of what it expects from contractors. 


Read More