3 ms·
FedRAMP is quickly becoming a joke if this happened on an approved vendor.
by edm0nd 3y ago
FedRAMP is quickly becoming a joke if this happened on an approved vendor.
- captainkrtek 3y ago“The cloud email server, hosted on Microsoft’s cloud for government customers, was accessible from the internet without a password, likely due to a misconfiguration.”
- hulitu 3y agoWell, they applied the last security standards. Didn't they ?
- willbes 3y agoThe thing is, it always was. It is more about compliance with procedures than any real security.
- alistairSH 3y agoDoes FedRAMP have any teeth (penalties for misconfigurationbreaches/etc)? If it's just a box-checking exercise, then this outcome isn't unexpected. Some of the box-checking will lead to better practices by vendors, but they won't go the extra mile into ensuring their policies are followed all the time.