Resources

FedRAMP Major Release – Rev. 5 Impacts (NIST SP 800-53)

Overview of the final FedRAMP (NIST SP 800-53) Rev. 5 release.

XRAMP – Security Assessments Evolved

Point in time security assessments have been around a long time. Do they provide the level of assurance that business, downstream customers, and the government expects? Is it enough in the digital world that is constantly evolving? The concept of continuous assurance isn’t new, but limited progress has been made in terms of the way we manage risk. This traditional assessment model will not change overnight, but there absolutely has to be a better to way improve it.

Blog

Red Team FedRAMP Introduction

With the transition to NIST SP 800-53 rev 5 comes the requirement for more proactive, adversarial testing for those wishing to meet the moderate and high accreditation standard. Admittedly, the control as written leaves this requirement open-ended and in need of some interpretation to properly apply in the FedRAMP context.

Blog

NIST 800-53 Revision 4 to Revision 5: A Deep Dive into CM-6 Configuration Settings for Cloud Service Providers

With the transition from Rev 4 to Rev 5, many Cloud Services Providers (CSPs) striving towards or maintaining Federal Risk and Authorization Management Program (FedRAMP) authorization are experiencing numerous hurdles when achieving compliance.

Blog

Why Your FedRAMP Penetration Test Might Suck

In today’s rapidly evolving digital landscape, ensuring the security of government data is vital.

Whitepaper

FedRAMP Rev. 5 – Deep Dive – Part 1 (Inspection of Encrypted Communications)

Changes introduced in NIST SP 800-53 Rev. 5 align with Executive Order 14028 as well as Executive Memorandums M-21-31 and M-22-09.

Blog

Container Vulnerability Scanning in FedRAMP Environments

Since early 2018, the FedRAMP Program Management Office (PMO) has instituted vulnerability scanning guidance for Cloud Service Providers (CSPs).

Whitepaper

Breaking Out and Breaking In

Transitioning from a career in law enforcement to one in cybersecurity was, on paper, a relatively short journey, lasting some 18 months of graduate school while pursuing a master’s degree in Cybersecurity Technology.

Whitepaper

FedRAMP Major Release – Rev. 5 Impacts (NIST SP 800-53)

Overview of the final FedRAMP (NIST SP 800-53) Rev. 5 release.

Blog

Tips for hacking into the cybersecurity industry

Looking to learn about what it takes to break into the cybersecurity field? Look no further – Candice MacDonnell has a good story to share from Fortreum.

Whitepaper

StateRAMP Fundamentals & StateRAMP Fast Track

StateRAMP is a non-profit organization that launched in early 2021 with the goal of providing a standardized approach to cloud cybersecurity authorization for State and Local governments. You might ask, why create another governing body when a proven framework for the federal government like FedRAMP exists? We get it, each industry and governing body needs to be a special snowflake. Before we jump to conclusions, let’s dive into the StateRAMP program to see if cloud service providers (CSP) should be paying attention for future business opportunity.

Blog

SOC 2 & FedRAMP – Why Fortreum is different

Audit time. It’s one of the most dreaded times of the year (or multiple times per year) for a security manager/CISO/administrator, etc. Is it because of the auditor? I’d like to hope not (at least for us)! Most often, it is TIME itself that is dreaded for assessments, and what is dreaded even more so is when there are multiple assessments running at the same time. How do cloud service providers move towards consolidated assessments (such as SOC 2 and FedRAMP) while preserving internal time and impact?

Contact us to discuss your cyber and cloud business needs. We’re happy to share our insights and work with you as your business evolves.

Resources

FedRAMP Major Release – Rev. 5 Impacts (NIST SP 800-53)

XRAMP – Security Assessments Evolved

Red Team FedRAMP Introduction

Why Your FedRAMP Penetration Test Might Suck

FedRAMP Rev. 5 – Deep Dive – Part 1 (Inspection of Encrypted Communications)

Container Vulnerability Scanning in FedRAMP Environments

Breaking Out and Breaking In

FedRAMP Major Release – Rev. 5 Impacts (NIST SP 800-53)

Tips for hacking into the cybersecurity industry

StateRAMP Fundamentals & StateRAMP Fast Track

SOC 2 & FedRAMP – Why Fortreum is different

Simplifying Cybersecurity Complexities

Our Services

Company