Health Systems have a lot to learn from GSA & NIST FedRAMP certification automation efforts

GSA has rolled out a roadmap next year to accelerate the cloud vendor certification process under FedRAMP. Health systems and innovation ecosystem partners should consider FedRAMP Tailored and similar FedRAMP certifications as a pattern for how healthcare delivery organizations (HDOs) should handle their security assessments.

GSA is working with the National Institute of Standards and Technology to develop a common machine-readable language — the Open Security Controls Assessment Language (OSCAL) — to lay the foundation for future automation efforts. HDOs should be tracking OSCAL and begin to use it in their security assessments processes as soon as possible. 

Read on federalnewsnetwork.com