4 ms·

If there’s one thing I don’t really want to see “accelerated” it’s the pace at which our state secrets add new, unvetted technology. “Move fast and break thing

• lordofgibbons 1y ago
  This is a false dichotomy. There's a massive grand canyon sized gulf between "unvetted technology" and whatever the hell SAP/Oracle/Tyler-Technologies are.
• derektank 1y ago
  FedRAMP services, even FedRAMP High services, aren't authorized to host classified material. My understanding is that those agreements are still largely negotiated directly between the intelligence / defense services and the big providers, such as the Joint Warfighting Cloud Capability contract. FedRAMP is a program for vetting SaaS services for use by government agencies broadly. FedRAMP Moderate and High certified services are qualified to host Controlled Unclassified Information, which might be sensitive and held by either the government or private companies like defense contractors, but I wouldn't call them state secrets per se
• paulddraper 1y ago
  FedRAMP can’t have classified data. This is for a lot of very benign government tools that that are expensive, stodgy, with very little competition.