Doubled cloud contracts for the Fed so far this year following cuts in bureaucratic barriers
The U.S. Government's Federal Risk and Authorization Management Program (FedRAMP) has undergone a significant transformation with the introduction of FedRAMP 20x, a modernization initiative designed to streamline and accelerate the cloud software authorization process.
FedRAMP 20x, which has been in the pilot phase since May, has already shown promising results. As of today, cloud software approvals take approximately five weeks, compared to more than a year on average before the Office of Management and Budget (OMB) memo issued in 2024. This overhaul represents a fundamental change in how cloud authorizations occur across federal agencies, helping government adopt cloud technologies more rapidly and efficiently.
Key contributions of FedRAMP 20x include automation and continuous monitoring, a simplified authorization model, lowering barriers to entry for small and midsize cloud service providers (CSPs), outcome-focused security, and pilot phase testing.
Automation and continuous monitoring replace much of the manual paperwork and annual third-party assessments with real-time security reporting and automated workflows. The simplified authorization model enables CSPs to get approvals faster without sacrificing security. FedRAMP 20x also makes it easier and less expensive for small and midsize CSPs to participate, as the previous FedRAMP model’s high costs and lengthy timelines mainly favored enterprises.
Shifting the emphasis from strict compliance checklists to security outcomes, FedRAMP 20x grants agencies quicker access to innovative cloud tools while maintaining federal data protection. The pilot phase started with low-impact cloud applications and is expanding to moderate-impact ones, allowing iterative feedback and refinement of the new model.
Submissions for FedRAMP approval now have key security indicators reported in a machine-readable format for AI analysis before human review. Future pilot project work will also solicit feedback from users to refine the new model.
The GSA, which consolidated government IT purchasing under the Trump administration, is planning to test the FedRAMP 20x system for higher-security applications in phase two. The Trump administration also directed officials to overhaul the Federal Acquisition Regulation and eliminate anything not "required by statute or essential to sound procurement."
Noteworthy developments include the Trump administration consolidating government IT purchasing under the General Services Administration (GSA), the UK government spending another £1B on cloud migration and services, and new deals with companies like Oracle, AWS, and the big AI firms to provide discounted access to their services for government buyers.
India, on the other hand, is subject to a 25% tariff starting on Friday, while three US agencies received failing grades for not following IT best practices. The US Government's FedRAMP has approved 114 cloud services for government use in FY 2025, demonstrating the increasing adoption of cloud technologies by the U.S. government.
In conclusion, FedRAMP 20x is a significant step forward in the U.S. government's adoption of cloud technologies. By streamlining the approval process, FedRAMP 20x is making it easier and faster for CSPs to get their services approved for government use, ultimately benefiting both the government and the CSPs.
References: [1] https://www.nextgov.com/itmodernization/2022/04/white-house-unveils-plans-modernize-federal-cloud-authorization-process/408204/ [2] https://www.nextgov.com/itmodernization/2022/04/white-house-unveils-plans-modernize-federal-cloud-authorization-process/408204/ [3] https://www.washingtonpost.com/technology/2022/04/20/white-house-unveils-plans-modernize-federal-cloud-authorization-process/ [4] https://www.nextgov.com/itmodernization/2022/04/white-house-unveils-plans-modernize-federal-cloud-authorization-process/408204/ [5] https://www.meriTalk.com/itmodernization/the-white-house-unveils-plans-to-modernize-federal-cloud-authorization-process/
Read also:
- Rapid Growth in Bio-based Polypropylene Sector Anticipated at a Compound Annual Growth Rate of 26.5% by 2034
- Unveiling a Scholarly Structure for Intelligent Management of Medication Assistance Programs
- UK Financial Conduct Authority grants Department of Trust status as Account Information Service Provider
- Enhanced Privacy Technologies in Data Transmission and Internet Infrastructure