Understanding FedRAMP: Creating a Cloud Security Roadmap

Understanding FedRAMP, Creating a Cloud Security Roadmap is a one-day in-depth educational program for Government Executives, Managers, Program Managers and Staff & Industry Partners.

Workshop Description:
In November 2010 GSA with support from Dept of Homeland Security and Dept of Defense established the Federal Risk and Authorization Management Program (FedRAMP) as the standard approach to Assessing and Authorizing cloud computing security services and products. Melvin Greer, Senior Fellow and Chief Strategist Cloud Computing describes the impact of FedRAMP on the development of secure cloud computing and explains what agencies and cloud service providers should do now to successfully meet FedRAMP requirements. During the session participants (Federal Agency Leaders, Potential Third Party Auditors and Cloud Service Providers) will develop customized FedRAMP Cloud Security Roadmaps that can guide the successful implementation of cloud security.

Date: April, 11 2012
Location: Tower Club, Tysons Corner, VA

What You Will Learn in the Education Program:
• Understand cloud security issues and opportunities
• Understand FedRAMP
• Why FedRAMP is important
• FedRAMP Strategy and Plan
• Cloud Security Requirements Baseline
• Continuous Monitoring
• Independent Verification and Validation
• Assessment and Authorizations

Why You Should Attend:
• Understand cloud computing security concepts and familiarize participants with the Government FedRAMP requirements
• Understand FedRAMP, why it is important and what you should do now
• Understand the FedRAMP Strategy and Plan

Primary Instructor:
Melvin Greer, Senior Fellow and Chief Strategist, Cloud Computing, author of book on Cloud computing, Cloud Security Alliance Advisory Board Member and industry thought leader contributing to Federal Cloud Computing Initiative

Narjis Ali, President and CEO of Sure Secure Solutions. Sure Secure offers a comprehensive range of IT solutions to its federal government customers including a specialization in secure cloud computing solutions.

* Agenda subject to change

7:30 AM Registration and Continental Breakfast
8:30 Welcome
8:45 Narjis Ali, President, Sure Secure Solutions: Security and Risk
      • What agency leaders, industry and staff need to know
      • What key offerings manage risk
           - What makes cloud security so hard
10:15 Break
10:30 Cloud Security and FedRAMP Overview
      • What executives, managers, and staff need to know
      • Core concepts of Cloud Security and what they mean
      • What is FedRAMP and why it matters
11:15 FedRAMP Strategy and Plan
      • Government Rational and Drivers
      • FedRAMP PMO, Metrics and Strategic Benefits
11:45 am Hosted Luncheon at the Tower Club
12:45 Cloud Security Requirements Baseline
      • 230 Major Controls who should understand
           - FIMSA and FedRAMP how they work together
2:00 pm FedRAMP Security Assessment and Authorization Process
      • Process Details
      • Phases and Timelines|
2:45 Refreshment Break
3:00 FedRAMP Success thru Third Party Assessment
      • Goals and Structure
      • Process and Responsibilities
4:45 FedRAMP – What you Should Do Now
      • Federal Agency Roadmap
           - Third Party Auditor Roadmap
      • Cloud Service Provider Roadmap
5:00 Want to learn more?
      • Where to go to educate yourself
      • Wrap Up and Q&A – Review Attendee Goals and Questions
      • Workshop adjourns

* Early bird and Government registration will include author whitepaper entitled “Why FedRAMP really Matters”

This event is not a vendor oriented conference, but a course that provides practical information for the Government and Industry on cloud security, the Federal Governments FedRAMP program and what agency leaders should be doing now.