The approval program for cloud service providers to the federal government is ready vendors and agencies alike to adopt new security standards, including 27 new controls. The updated controls are the result of the fourth revision (“rev 4”) to the National Institute of Standards and Technology’s (NIST) special publication 800-53, which sets security baselines for federal IT systems. The Federal Risk and Authorization Management Program (FedRAMP), which authorizes cloud providers, spent 3,000 hours combing through 1,300 pages of edits to…
