A security manager is evaluating different security control frameworks for a project involving standardized security assessments and authorization processes for cloud providers. Which applicable framework was originally developed in 2011 as a collaborative effort between GSA, DOD, and DHS to reduce duplicative efforts?
The correct answer is FedRAMP (Federal Risk and Authorization Management Program). FedRAMP was developed in 2011 as a collaborative effort between the General Services Administration (GSA), Department of Defense (DOD), and Department of Homeland Security (DHS). Its purpose was to provide a cost-effective, risk-based approach for the adoption and use of cloud services by the U.S. federal government, reducing duplicative efforts and inconsistencies in security assessments.
While NIST provides various security frameworks including SP 800-53 (which FedRAMP leverages), it wasn't specifically created as a collaborative effort between these three agencies in 2011. ISO 27001 is an international standard developed by the International Organization for Standardization, not a U.S. government initiative. COBIT is developed by ISACA as a business framework for governance and management of enterprise IT.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is FedRAMP and why is it important?
Open an interactive chat with Bash
Who are the key stakeholders involved in FedRAMP?
Open an interactive chat with Bash
What frameworks does FedRAMP leverage?
Open an interactive chat with Bash
ISC2 CISSP
Security and Risk Management
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Oh snap!
Loading...
Loading...
Loading...
Information Technology Package Join Premium for Full Access