FedRAMP “equivalent” memo review - DFARS and CMMC
Amira Armond decomposes the DoD CIO's memo in FedRAMP equivalency and explains its impact on cloud service providers and what it means for organizations seeking certification. The ramifications of this for MSPs will also be significant, due to the wording in the proposed CMMC Program Rule that indicates the Security Protection Data may need the same level of protection as CUI.