CGI Federal gets FedRAMP stamp of approval
Connecting state and local government leaders
Company becomes the second provider, and first large one, certified as meeting federal standards for security assessment, authorization and continuous monitoring.
CGI Federal Inc. has been granted provisional approval to offer cloud services under the federal government’s FedRAMP cloud security program.
CGI Federal, a U.S. subsidiary of the CGI Group Inc., is the second company to earn FedRAMP certification and, currently the only large provider. In January, Cary, N.C.-based Autonomic Resources LLC, a certified 8a small business, won provisional authorization to market its infrastructure-as-a-service offerings to federal agencies.
FedRAMP, The Federal Risk Authorization Management Program, provides a standard approach for security assessment, authorization and continuous monitoring of cloud products and services. FedRAMP uses a “do once, use many times” framework that is expected to reduce the cost, time and staff required to conduct redundant agency security assessments of cloud solutions. The program is designed to accelerate the adoption of new technology while making procurement more cost-effective through the reuse of assessments and authorizations, CGI officials said.
CGI received the provisional approval from the FedRAMP Joint Authorization Board after company officials fully documented and implemented FedRAMP security controls on the company's cloud offerings. Afterwards, an independent FedRAMP-accredited third party assessment organization audited the implementation to ensure compliance, CGI officials said.
“As more government services and data are migrated to cloud environments, FedRAMP’s controls will increase agency confidence through the consistent, disciplined application of security practices,” CGI Federal President Donna Ryan said in a release. “Improving real-time security visibility and transparency of operations between agencies and cloud providers is critical to achieving the benefits of cloud.”
CGI is a full-service cloud provider for commercial and government organizations globally. The company is one of three that have been awarded both of GSA’s government-wide cloud contracts for infrastructure-as- a-service and e-mail-as-a-service.