FedRAMP

What is FedRAMP?

Federal Risk and Authorization Management Program (FedRAMP) is a United States government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services.
Tech worker at her workstation working from home

Why FedRAMP?

  • FedRAMP authorization accelerates digital transformation. As a government-wide program, FedRAMP promotes the adoption of cloud services in a secure way by providing a set of security and risk assessment standards that cloud technologies must adhere to.
  • FedRAMP authorization is required. If you’re planning to use a cloud-based technology in the U.S. government, it must comply with FedRAMP standards. These approvals ensure the protection of valuable investments that the government makes in technology and information, which amounts to billions of dollars per year.
  • FedRAMP authorization provides credibility. The FedRAMP authorization process is rigorous. Evaluation includes a three-step procedure. First, a security assessment is conducted, in which an agency is required to meet a standardized set of standards and controls. These standards are assessed by a variety of subject matter experts and third-party evaluators. Then, once these requirements are satisfied, the FedRAMP program grants a security authorization. Lastly, after authorization, an ongoing assessment and authorization plan is implemented so that your organization does not fall out of compliance.

The importance of FedRAMP

Prior to FedRAMP, each government agency conducted its own evaluations for cloud computing services. This often resulted in redundant, inconsistent, costly, and inefficient efforts. FedRAMP establishes a baseline set of security evaluation criteria for cloud services, creating uniform and standard guidelines and requirements for all agencies.

As a pioneer and leader in enterprise cloud networking software, Aruba supports FedRAMP’s goal of increasing the adoption, trustworthiness, and consistency of secure cloud solutions deployed within the U.S. federal government and cloud service providers.

While FedRAMP was designed for the benefit of U.S. federal agencies, state and local organizations in the US. public sector (SLED) are increasingly applying the FedRAMP framework within their own contracts and assessments to achieve a standardized level of security and compliance. In the first half of 2021, a new authorization program called StateRAMP was launched to formally bring cybersecurity standards to state and local governments, and its accompanying providers.

In broader enterprise use cases, FedRAMP and StateRAMP capabilities oftentimes supersede those stipulated within industry compliance programs such as PCI, SOC2 and HIPAA. The private sector can take this authorization into account when evaluating a cloud computing provider.

Vendors such as Aruba that are introducing products like Aruba Central to become FedRAMP authorized are committed to maintaining the highest safeguards for its data security and technology. Stringent evaluation of its platform is performed regularly to retain FedRAMP authorization.

FedRAMP authorized products

ProductService ModelsDeployment ModelImpact LevelStatus
Aruba CentralSaaSPublic CloudModerateIn Process

Aruba's FedRAMP authorization status

Aruba achieving FedRAMP authorization will be a significant technical achievement that reinforces our focus on security.

  • Aruba is the first networking vendor to undergo FedRAMP authorization for its entire cloud networking platform.
  • Aruba Central will be one of the first all-in-one, AI-powered cloud networking platform to achieve FedRAMP authorization (at the moderate level).

Ready to get started?