JDBiggs & Associates – Security in cloud computing

Javascript is currently disabled. This site requires Javascript to function correctly. Please enable Javascript in your browser!

Methodologies

Purchase Our Methodologies

All JD Biggs & Associate Methodologies may be purchased for use in your office. Full color prints are available in two sizes (18"x18" and 24"×24") on 36lb paper for your business needs. Soft copies of the Methodologies on CD in PDF format are also available .

Security & Privacy Chart - Top Usages
· Achieve FedRAMP Compliance	· Achieve FISMA Compliance
· Achieve HIPAA Compliance	· Develop Agency or Corporate Polices
· Develop Agency or Corporate Standards, Guidelines and Handbooks	· Conducting Annual Training and Awareness (Agency or Corporate)
· Conduct FedRAMP Penetration Testing
· Develop Security Assessment Report (SAR)
· Establish and manage continuous monitoring activities
· Educating Senior and Executive Management on OMB, NIST and FIPS guidance and publications
· Educating Human Resource Specialist, Junior and Mid-Level Professionals
Note Available: Controlled Unclassified Information (CUI) Testing Methodology

JDBiggs S&P Charts Order 2019.pdf

Or Select the More Button associated with your chart selection and order online.

Available Methodologies

Federal Risk & Authorization Management Program (FedRAMP)

This FedRAMP methodology provides an excellent overview of requirements / activities / work products, for cloud service providers (CSP's) and Federal Agencies on becoming FedRAMP accredited.

Our chart graphically differentiates the responsibilities of the PMO / JAB, System Owner (SO) and 3PAO. Apply this strategy for quick reference, briefing stakeholders, assembling the security authorization package and preparing for the 3PAO security assessment.

The 4 phases in this chart, is a strategy for achieving compliance through assessing risks and providing the Authorizing Official (AO) with accreditation information for: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).

Federal Information Security Management Act (FISMA) compliance updates have not changed for the CIO, whom is responsible for FISMA and designating the "Senior Agency Information Security Officer (SAISO). What has changed are the quarterly / annual reporting dates in CyberScope, High Value Assets List updates, Incident reporting requirements and my favorite "Strengthening Continuous Diagnostic & Mitigation (CDM) capabilities". This chart is a great poster on your wall for understanding how to tackling the five (5) major sections of the legislation and eight components of the agency program, that begins with an understanding of FISMA which is best communicated using this chart.

The National Institute of Standards and Technology (NIST) was quite busy in 2018, working on updates to SP 800-37 Rev 2 "Risk Management Framework (RMF)". The updates have substantially changed activities performed on systems throughout the year. The premise of conducting an assessment and/or authorization once every three (3) years has been changed through the Continuous Diagnostics & Mitigation (CDM) requirements issued by the Office of Management and Budget (OMB) and NIST Special Publications.