Secure the Standard. Lead the Change.
FedRAMP Workshop / Training
FedRAMP Strategic Preparation Workshop (Virtual)
Did you know that one of the biggest obstacles for companies is their lack of preparation for obtaining a FedRAMP ATO? FedRAMP is not simply a program that can be checked off a list; it is a rigorous, complex, and often frustrating process, even for large companies. Achieving ATO is just the first step in the ongoing life-cycle of FedRAMP, which requires continuous monitoring, support, annual audits, vulnerability management, reporting, and more.
We guide you and your team through each aspect of the FedRAMP process, ensuring that you have a thorough understanding of the requirements and can plan accordingly. We also provide assistance in understanding the initial and ongoing support costs that will be necessary to maintain a FedRAMP ATO.
FedRAMP Strategic Preparation Workshop Includes: (2 sessions 1/2 day each)
-
Introductions
-
FedRAMP Overview +Benefits
-
Paths to FedRAMP
-
FedRAMP Sponsorship
-
The Meat and Potatoes (What to plan for)
-
Gap Assessment Overview
-
Security controls
-
SSP +policy and documentation
-
Risk assessment
-
AO-Authorization process
-
Auditor requirements
-
Readiness Assessment
-
Security Assessment Plan
-
Security Assessment Readiness
-
Submission to FedRAMP
-
-
FedRAMP Continuous Monitoring Requirements
-
Rough Order of Magnitude of Costs:
-
Initial Costs
-
Ongoing Support Costs
-
-
Next Steps
*If onsite is requested the requester must cover all Travel Expenses.
FedRAMP Compliance Professional Training (Virtual)
Learn How to develop System Security Packages!
Write Control responses like a PRO!
FedRAMP Compliance Professional Training (Virtual)
The FedRAMP Compliance Professional training is designed to teach entry-mid level personnel everything they need to know to develop a System Security Package (SSP). We provide a deep dive into each section of the SSP and associated documentation to give the student an overall view of what the SSP consists of. We then work with the student on writing SSP control responses, policies and procedures, and how to complete the full SSP package.
Upon completion, the compliance professional will have hands-on experience with an SSP, writing responses to controls, an understanding of the documentation required to complete the package, and more. This program will equip the professional with the knowledge of how the controls should be responded to by them and/or a third-party writer. This gives the compliance professional a solid foundation of understanding of the control and how to articulate the writings of controls.
FedRAMP Compliance Worker Training (12 hrs 4 sessions 3 hrs each)
-
Welcome and introductions
-
Overview of FedRAMP
-
Overview of the FedRAMP compliance process
-
SSP Control Review
-
Review of a completed SSP
-
How to write SSP control statements
-
Crafting controls and responding to part a, b, c, etc. of the SSP
-
Hands-On Exercise (student writes responses to controls)
-
SSP writing review by instructor
-
Ongoing Training (*additional costs)