Home » Author Archives: Jeffrey Widom

Author Archives: Jeffrey Widom

Fear, Stress and Chaos: What Does the 3PAO Want From Me?


FedRAMP can be challenging. All the paperwork, monitoring and logging has the potential to break even the most cohesive cloud service provider (CSP). And when preparing for a 3PAO assessment, numerous stressful questions often arise: What can a CSP do to prepare for the assessment? What information will the 3PAO request? Will the 3PAO provide a questionnaire detailing the artifacts ...

Read More »

The Questionable FedRAMP Ready Program

FedRAMP Ready Questions

On March 28, 2016, the Federal Risk and Authorization Management Program (FedRAMP) Program Management Office (PMO) introduced the revamping of FedRAMP Ready to include a FedRAMP Readiness Capabilities Assessment. The goal of the updated FedRAMP Ready process is to allow cloud service providers (CSP) to demonstrate security capabilities through an assessment by an accredited Third Party Assessment organization (3PAO), rather ...

Read More »

Fix FedRAMP? A 3PAO’s Perspective

fix FedRAMP

As one of the original accredited Third Part Assessment Organizations (3PAO), Lunarline has been involved with the Federal Risk and Authorization Management Program (FedRAMP) since its inception. Lunarline’s team of cyber security professionals are responsible for providing critical guidance and consulting to cloud service providers (CSP) that are just starting to determine their FedRAMP objectives to CSPs that are being ...

Read More »