FedRAMP vs. FISMA Compliance: What is the Difference?

Jun 30, 2021 Continuum GRC 0 Comment

Working with federal agencies can be a big boon for enterprise and SMB service providers. Not only are they working in a lucrative and challenging space, but they can also provide critical infrastructural support to the operation and defense of our country. The regulations, however, can prove a nightmare. For example, should you adhere to FISMA vs. FedRAMP? What is NIST? Who can I work with to help me get started?

Here, we’ll answer one of the more basic and important questions: What is the difference between FedRAMP and FISMA authorization? Depending on the type of services you offer, you could be working through a set of similar, yet slightly modified, regulatory obligations.

What is NIST 800-53 Version 5?

Jun 23, 2021 Continuum GRC 0 Comment

NIST 800-53 is the cornerstone of many government cybersecurity policies in the United States, including how security shapes partnerships between federal agencies and IT and cloud providers. Understandably, it has gone through several revisions since its initial publication in 2005 to meet evolving security threats.

Here, we’ll discuss the latest revision of NIST 800-53, Revision 5. This revision will go into full effect for all providers on September 23, 2021, with the withdrawal of Revision 4.

Is FedRAMP Mandatory?

May 26, 2021 Continuum GRC 0 Comment

Cybersecurity is all over the news. With the SolarWinds and Colonial Pipelines hack, we’ve learned the hard way that critical infrastructure is something we cannot take for granted. That’s why it is so important that IT providers understand why compliance frameworks like FedRAMP are necessary.

Is FedRAMP compliance mandatory? Yes. If you provide cloud services to a federal agency, you must earn your FedRAMP ATO. However, instead of seeing this as another hoop to jump through, take the time to better understand why this is so critical for national security and how it can be a huge benefit to your company overall.