Skip to content

Why FedRAMP Is Worth Caring About

Reposted from AOL Government, http://gov.aol.com/2011/12/12/why-fedramp-is-worth-caring-about/.

If you have been at a recent Washington Capitals hockey game when the opponent scores a goal, you know the crowd routinely shouts out “Who cares!”

Last week, Steven VanRoekel, Federal CIO, released the long awaited OMB plan for the Federal Risk and Authorization Management Program, or FedRAMP; which reminds me to be thankful for pronounceable acronyms. The purpose of FedRAMP per the implementing OMB memorandum, is to “provide a cost-effective, risk-based approach for the adoption and use of cloud services”.

This blog entry is my attempt to answer the question “Who cares!”

Why FedRAMP Is Worth Caring About

Earthquakes, Emergency Training, and COOP

When I was at the Department of Transportation …

It occurs to me that a lot of my writing starts with that phrase. I haven’t yet decided if I use it because I learned a lot there or because I think people will be more likely to listen if I start a discussion with it.

Regardless, when I was at the Department of Transportation we would do emergency training. What if there was another 9/11 attack, what if there was a cybersecurity attack, and so forth. Some of us got to go to semi-secret locations and stay underground, walk down long corridors with lights along the top casting shadows, lots of clacking of shoes on the floor, eating together in the cafeteria, periodically getting messages of incident updates, doing reports, watching the pretend (or real) Secretary, talking to the (always) pretend President, and so on. It was pretty cool, like getting to go back to camp for a day. Some of the exercises were pretty extensive involving multiple Government agencies including in some cases State and Local governments.Earthquakes, Emergency Training, and COOP

My Guest Lecture at George Washington University on Cybersecurity

Every year or so I am lucky to be invited by Dr. Robert McCreight who teaches a graduate class on National Security and Technology to be a guest lecturer on Cybersecurity.

Since the classes I teach at the University of Maryland and Syracuse University are on-line distance learning, it is always a treat for me to have actual live students in the same classroom as I am to interact with. This year the exchange of information was really great, Dr. McCreight has a wonderful class. For all of these activities, I deal with what I call the “avoidance of appearing like an idiot in front of people syndrome”, which forces me to at least to scan and keep up with the literature before the class is held.

While I am one of those people who learn best by doing, being able to talk to and/or discuss with bright students is still very helpful and fun to do.

I have posted my presentation below and during the next few weeks hope to write a few columns based on the later slides, of course I have still not written my last two posts I promised on cloud computing, as as usual what I plan to do with this blog and what actually happens continues to diverge.

My Guest Lecture at George Washington University on Cybersecurity

Lessons From a Political CIO by Dan Mintz CIO, Department of Transportation

This morning in the Washington Post there was a column discussing the regular transition of political appointees, http://views.washingtonpost.com/leadership/fedcoach/2011/02/political-appointee-merry-go-round.html?hpid=smartliving. For those of you are are thinking of becoming a political appointee or wonder about the process,… Lessons From a Political CIO by Dan Mintz CIO, Department of Transportation