3 ms·
I just read the quote that everyone is printing (although haven't seen the full statement). GSA certified the Google Apps Premier environment as FISMA complian
by kenjackson 16y ago
I just read the quote that everyone is printing (although haven't seen the full statement).
GSA certified the Google Apps Premier environment as FISMA compliant in July of 2010. Google Apps for Government uses the Google Apps Premier infrastructure, but adds additional controls in order to meet requirements requested by specific government agencies. The original FISMA certification remains intact while GSA works with Google to review the additional controls to update the existing July 2010 FISMA certification.
It's unclear to me what they're saying with respect to Google Apps for Gov. Are they saying that it is FISMA certified as of today? Or are they saying that its pending recert after the review, but the original Google Apps Premiere is still certified?
It sounds like they're saying its not certified w/ new controls, but they don't have to a full certification process on it as its built on a certified product -- they only need to check the deltas. In which case the DOJ and MS are technically correct.
Or are they saying that if you make a small change that requires recert, you keep you certification as the review takes place and they can revoke cert if they determine there's a problem. I can't believe that would be the case, because it would require pulling down a deployment, which can be expensive.
It would be nice if they simply said, "Google Apps for Gov" is certified. We're doing additional certs on new functionality, but the new functionality can be deployed as the cert is checked. But it's the US gov't, this is probably as clear as they get.