The Federal Risk and Authorization Management Program (FedRAMP) is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. FedRAMP was created by the Joint Authorization Board (JAB) with representative Chief Information Officers from the Department of Homeland Security (DHS), the General Services Administration (GSA), and the Department of Defense (DoD). Many other government agencies also participated in reviewing and standardizing the controls, policies and procedures.
The purpose of FedRAMP is to:
Ensure that cloud applications and services used by government agencies have sufficient safeguards
Enable efficient and cost-effective procurement of information systems/services
Eliminate duplication of effort and risk management costs across government agencies