Federal Cloud Computing, 2nd Edition

Federal Cloud Computing, 2nd Edition

by Matthew Metheny
Released January 2017
Publisher(s): Syngress
ISBN: 9780128096871

Read it now on the O’Reilly learning platform with a 10-day free trial.

O’Reilly members get unlimited access to books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Book description

Federal Cloud Computing: The Definitive Guide for Cloud Service Providers, Second Edition offers an in-depth look at topics surrounding federal cloud computing within the federal government, including the Federal Cloud Computing Strategy, Cloud Computing Standards, Security and Privacy, and Security Automation.

You will learn the basics of the NIST risk management framework (RMF) with a specific focus on cloud computing environments, all aspects of the Federal Risk and Authorization Management Program (FedRAMP) process, and steps for cost-effectively implementing the Assessment and Authorization (A&A) process, as well as strategies for implementing Continuous Monitoring, enabling the Cloud Service Provider to address the FedRAMP requirement on an ongoing basis.

This updated edition will cover the latest changes to FedRAMP program, including clarifying guidance on the paths for Cloud Service Providers to achieve FedRAMP compliance, an expanded discussion of the new FedRAMP Security Control, which is based on the NIST SP 800-53 Revision 4, and maintaining FedRAMP compliance through Continuous Monitoring. Further, a new chapter has been added on the FedRAMP requirements for Vulnerability Scanning and Penetration Testing.

  • Provides a common understanding of the federal requirements as they apply to cloud computing
  • Offers a targeted and cost-effective approach for applying the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF)
  • Features both technical and non-technical perspectives of the Federal Assessment and Authorization (A&A) process that speaks across the organization

Table of contents

  1. Cover image
  2. Title page
  3. Table of Contents
  4. Copyright
  5. Dedication
  6. About the Author
  7. About the Technical Editor
  8. Foreword by William Corrington
  9. Foreword by Jim Reavis
  10. Chapter 1. Introduction to the federal cloud computing strategy
    1. Abstract
    2. Introduction
    3. A Historical View of Federal IT
    4. Cloud Computing: Drivers in Federal IT Transformation
    5. Decision Framework for Cloud Migration
    6. Summary
    7. References
  11. Chapter 2. Cloud computing standards
    1. Abstract
    2. Introduction
    3. Standards Development Primer
    4. Cloud Computing Standardization Drivers
    5. Identifying Standards for Federal Cloud Computing Adoption
    6. Summary
    7. References
  12. Chapter 3. A case for open source
    1. Abstract
    2. Introduction
    3. Open Source Software and the Federal Government
    4. Open Source Software Adoption Challenges: Acquisition and Security
    5. Open Source Software and Federal Cloud Computing
    6. Summary
    7. References
  13. Chapter 4. Security and privacy in public cloud computing
    1. Abstract
    2. Introduction
    3. Security and Privacy in the Context of the Public Cloud
    4. Federal Privacy Laws and Policies
    5. Federal Information Security Modernization Act (FISMA)
    6. OMB Memorandum Policies
    7. Safeguarding Privacy Information
    8. Security and Privacy Issues
    9. Summary
    10. References
  14. Chapter 5. Applying the NIST risk management framework
    1. Abstract
    2. Introduction to FISMA
    3. Risk Management Framework Overview
    4. NIST RMF Process
    5. Summary
    6. References
  15. Chapter 6. Risk management
    1. Abstract
    2. Introduction to Risk Management
    3. Federal Information Security Risk Management Practices
    4. Overview of Enterprise-Wide Risk Management
    5. NIST Risk Management Process
    6. Comparing the NIST and ISO/IEC Risk Management Processes
    7. Summary
    8. References
  16. Chapter 7. Comparison of federal and international security certification standards
    1. Abstract
    2. Introduction
    3. Overview of Certification and Accreditation
    4. NIST and ISO/IEC Information Security Standards
    5. Summary
    6. References
  17. Chapter 8. FedRAMP primer
    1. Abstract
    2. Introduction to FedRAMP
    3. FedRAMP Overview
    4. FedRAMP Policy Memo
    5. FedRAMP Governance and Stakeholders
    6. FedRAMP Accelerated Process
    7. FedRAMP Security Assessment Framework
    8. Third Party Assessment Organization Program
    9. Summary
    10. References
  18. Chapter 9. The FedRAMP cloud computing security requirements
    1. Abstract
    2. Security Control Selection Process
    3. FedRAMP Cloud Computing Security Requirements
    4. Federal Laws, Executive Orders, Policies, Directives, Regulations, Standards and Guidelines
    5. Summary
    6. References
  19. Chapter 10. Security testing: Vulnerability assessments and penetration testing
    1. Abstract
    2. Introduction to Security Testing
    3. Vulnerability Assessment
    4. Penetration Testing
    5. FedRAMP Vulnerability Scan and Penetration Testing Requirements
    6. Summary
    7. References
  20. Chapter 11. Security assessment and authorization: Governance, preparation, and execution
    1. Abstract
    2. Introduction to the Security Assessment Process
    3. Governance in the Security Assessment
    4. Preparing for the security assessment
    5. Executing the Security Assessment Plan
    6. Summary
    7. References
  21. Chapter 12. Strategies for continuous monitoring
    1. Abstract
    2. Introduction to Continuous Monitoring
    3. The Continuous Monitoring Process
    4. Continuous Monitoring within FedRAMP
    5. Summary
    6. References
  22. Chapter 13. Continuous monitoring through security automation
    1. Abstract
    2. Introduction
    3. CM Reference Architectures
    4. Security Automation Standards and Specifications
    5. Operational Visibility and Continuous Monitoring
    6. Summary
    7. References
  23. Chapter 14. A case study for cloud service providers
    1. Abstract
    2. Case Study Scenario: “Healthcare Exchange”
    3. Applying the Risk Management Framework within FedRAMP
    4. Summary
    5. References
  24. Index

Product information

  • Title: Federal Cloud Computing, 2nd Edition
  • Author(s): Matthew Metheny
  • Release date: January 2017
  • Publisher(s): Syngress
  • ISBN: 9780128096871