FedRAMP What is FedRAMP?
- FedRAMP explained
- Why FedRAMP?
- The importance of FedRAMP
- FedRAMP authorization
FedRAMP explained
Federal Risk and Authorization Management Program (FedRAMP) is a United States government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services.
Why FedRAMP?
- FedRAMP authorization accelerates digital transformation. As a government-wide program, FedRAMP promotes the adoption of cloud services in a secure way by providing a set of security and risk assessment standards that cloud technologies must adhere to.
- FedRAMP authorization is required. If you’re planning to use a cloud-based technology in the U.S. government, it must comply with FedRAMP standards. These approvals ensure the protection of valuable investments that the government makes in technology and information, which amounts to billions of dollars per year.
- FedRAMP authorization provides credibility. The FedRAMP authorization process is rigorous. Evaluation includes a three-step procedure. First, a security assessment is conducted, in which an agency is required to meet a standardized set of standards and controls. These standards are assessed by a variety of subject matter experts and third-party evaluators. Then, once these requirements are satisfied, the FedRAMP program grants a security authorization. Lastly, after authorization, an ongoing assessment and authorization plan is implemented so that your organization does not fall out of compliance.
The importance of FedRAMP
Prior to FedRAMP, each government agency conducted its own evaluations for cloud computing services. This often resulted in redundant, inconsistent, costly, and inefficient efforts. FedRAMP establishes a baseline set of security evaluation criteria for cloud services, creating uniform and standard guidelines and requirements for all agencies.
As a pioneer and leader in enterprise cloud networking software, HPE Aruba Networking supports FedRAMP’s goal of increasing the adoption, trustworthiness, and consistency of secure cloud solutions deployed within the U.S. federal government and cloud service providers.
While FedRAMP was designed for the benefit of U.S. public sector, state and local organizations in the US. public sector (SLED) are increasingly applying the FedRAMP framework within their own contracts and assessments to achieve a standardized level of security and compliance. In the first half of 2021, a new authorization program called StateRAMP was launched to formally bring cybersecurity standards to state and local governments, and its accompanying providers.
In broader enterprise use cases, FedRAMP and StateRAMP capabilities oftentimes supersede those stipulated within industry compliance programs such as PCI, SOC2 and HIPAA. The private sector can take this authorization into account when evaluating a cloud computing provider.
Vendors such as HPE Aruba Networking that are introducing products like HPE Aruba Networking Central to become FedRAMP authorized are committed to maintaining the highest safeguards for its data security and technology. Stringent evaluation of its platform is performed regularly to retain FedRAMP authorization.
FedRAMP authorization
HPE Aruba Networking Central achieving FedRAMP authorization is a significant technical achievement that reinforces our focus on security.
- HPE Aruba Networking is the first networking vendor to undergo FedRAMP authorization for its entire cloud networking platform.
- HPE Aruba Networking Central is the first all-in-one, AI-powered cloud networking platform to achieve FedRAMP authorization (at the moderate level).
FedRAMP authorized products
Product | Service models | Deployment model | Impact level | Status |
| HPE Aruba Networking Central | SaaS | Public Cloud | Moderate | Authorized |