FedRAMP Transitioning to Meet Latest NIST Controls

The Federal Risk and Authorization Management Program is updating its materials to align with the latest cloud security guidance issued by the National Institute of Standards and Technology, which recently finalized Revision 5 of SP 800-53 “Security and Privacy Controls for Federal Information Systems and Organizations,” and SP 800-53B “Control Baselines for Information Systems and Organizations.” The FedRAMP Program Management Office plans to work with the Joint Authorization Board to develop draft baselines, as well as control and implementation guidance, and release that draft for public comment.