The Proposed Security Assessment and Authorization for U.S. Government Cloud Computing has been developed by the inter-agency group comprised of the U.S. General Services Administration, the National Institute of Standards and Technology, the CIO Council, and working bodies such as the Information Security and Indentity Management Committee. This group collaborated with public and private sector groups as well as NGOs and academia to evaluate security controls and multiple Assessment and Authorization (A&A) models for U.S. government cloud computing. Specifically included in the document are the security controls and processes for FedRAMP, the Federal Risk and Authorization Management Program. FedRAMP will be established to provide standard A&A services for cloud computing solutions used by multiple agencies in the Federal government. The first phase of FedRAMP is expected to be operational first quarter CY2011.

The documents are located on www.FedRAMP.gov. In order to improve this document, we request input from the community. Please review the posted document and submit all comments by 11:59 pm EST onThursday, December 2, 2010. Comments must be submitted online at www.FedRAMP.gov and may be made anonymously or may include contact information.

Please direct any questions regarding the comment processes to [email protected].

All press inquiries should be directed to Sara Merriam, GSA's Press Secretary at 202-501-9139.