Creating a NIST/FedRAMP Compliant Architecture

FedRAMP is moving toward 20x, but federal agencies still rely on NIST SP 800-53 Rev. 5 evidence for authorization decisions. Johann Dettweiler explores how CSPs can use one evidence layer, KSI-to-control mapping, and automation to support both.

FedRAMP 20x is moving federal cloud security in the right direction. But if agencies still require duplicative documentation and assessments, have we really solved the problem? Johann Dettweiler examines the next challenge: reciprocity.