Compliance Gap Analysis

[Wanrashid1]

Cloud service vendors looking to do business with the government frequently complain to the Office of Management and Budget (OMB) and the Federal Chief Information Officer (CIO) that the FedRAMP approval process imposes additional compliance requirements on top of existing requirements like those mandated by the International Organization for Standardization (ISO) and the Health Insurance Portability and Accountability Act (HIPAA). TTS will conduct research to validate or invalidate this assertion with the goal of identifying any unique FedRAMP requirements that are beyond compliance frameworks such as ISO and HIPAA, as within the purview of the FedRAMP Program Management Office.

An idea submitted by a civil servant at: General Services Administration, Federal Acquisition Service