Federal Cloud Computing: The Definitive Guide for Cloud Service Providers, Second Edition offers an in-depth look at topics surrounding federal cloud computing within the federal government, including the Federal Cloud Computing Strategy, Cloud Computing Standards, Security and Privacy, and Security Automation.
You will learn the basics of the NIST risk management framework (RMF) with a specific focus on cloud computing environments, all aspects of the Federal Risk and Authorization Management Program (FedRAMP) process, and steps for cost-effectively implementing the Assessment and Authorization (A&A) process, as well as strategies for implementing Continuous Monitoring, enabling the Cloud Service Provider to address the FedRAMP requirement on an ongoing basis.
This updated edition will cover the latest changes to FedRAMP program, including clarifying guidance on the paths for Cloud Service Providers to achieve FedRAMP compliance, an expanded discussion of the new FedRAMP Security Control, which is based on the NIST SP 800-53 Revision 4, and maintaining FedRAMP compliance through Continuous Monitoring. Further, a new chapter has been added on the FedRAMP requirements for Vulnerability Scanning and Penetration Testing.
1. Chapter 1. Introduction to the federal cloud computing strategy - p. 1 2. Chapter 2. Cloud computing standards - p. 35 3. Chapter 3. A case for open source - p. 59 4. Chapter 4. Security and privacy in public cloud computing - p. 79 5. Chapter 5. Applying the NIST risk management framework - p. 117 6. Chapter 6. Risk management - p. 185 7. Chapter 7. Comparison of federal and international security certification standards - p. 211 8. Chapter 8. FedRAMP primer - p. 239 9. Chapter 9. The FedRAMP cloud computing security requirements - p. 269 10. Abstract - p. 269 11. Security Control Selection Process - p. 269 12. FedRAMP Cloud Computing Security Requirements - p. 272 13. Federal Laws, Executive Orders, Policies, Directives, Regulations, Standards and Guidelines - p. 362 14. Summary - p. 376 15. References - p. 376 16. Chapter 10. Security testing: Vulnerability assessments and penetration testing - p. 379 17. Chapter 11. Security assessment and authorization: Governance, preparation, and execution - p. 401 18. Chapter 12. Strategies for continuous monitoring - p. 425 19. Chapter 13. Continuous monitoring through security automation - p. 453 20. Chapter 14. A case study for cloud service providers - p. 473 21. Index - p. 499
Federal Cloud Computing: The Definitive Guide for Cloud Service Providers, Second Edition offers an in-depth look at topics surrounding federal cloud computing within the federal government, including the Federal Cloud Computing Strategy, Cloud Computing Standards, Security and Privacy, and Security Automation.
You will learn the basics of the NIST risk management framework (RMF) with a specific focus on cloud computing environments, all aspects of the Federal Risk and Authorization Management Program (FedRAMP) process, and steps for cost-effectively implementing the Assessment and Authorization (A&A) process, as well as strategies for implementing Continuous Monitoring, enabling the Cloud Service Provider to address the FedRAMP requirement on an ongoing basis.
This updated edition will cover the latest changes to FedRAMP program, including clarifying guidance on the paths for Cloud Service Providers to achieve FedRAMP compliance, an expanded discussion of the new FedRAMP Security Control, which is based on the NIST SP 800-53 Revision 4, and maintaining FedRAMP compliance through Continuous Monitoring. Further, a new chapter has been added on the FedRAMP requirements for Vulnerability Scanning and Penetration Testing.
1. Chapter 1. Introduction to the federal cloud computing strategy - p. 1 2. Chapter 2. Cloud computing standards - p. 35 3. Chapter 3. A case for open source - p. 59 4. Chapter 4. Security and privacy in public cloud computing - p. 79 5. Chapter 5. Applying the NIST risk management framework - p. 117 6. Chapter 6. Risk management - p. 185 7. Chapter 7. Comparison of federal and international security certification standards - p. 211 8. Chapter 8. FedRAMP primer - p. 239 9. Chapter 9. The FedRAMP cloud computing security requirements - p. 269 10. Abstract - p. 269 11. Security Control Selection Process - p. 269 12. FedRAMP Cloud Computing Security Requirements - p. 272 13. Federal Laws, Executive Orders, Policies, Directives, Regulations, Standards and Guidelines - p. 362 14. Summary - p. 376 15. References - p. 376 16. Chapter 10. Security testing: Vulnerability assessments and penetration testing - p. 379 17. Chapter 11. Security assessment and authorization: Governance, preparation, and execution - p. 401 18. Chapter 12. Strategies for continuous monitoring - p. 425 19. Chapter 13. Continuous monitoring through security automation - p. 453 20. Chapter 14. A case study for cloud service providers - p. 473 21. Index - p. 499
