Federal Risk and Authorization Management Program

Target entity: Federal Risk and Authorization Management Program
Context triple: [FedRAMP Program Management Office, partOf, Federal Risk and Authorization Management Program]

• A. FedRAMP Program Management Office
  The FedRAMP Program Management Office is the federal team that oversees and manages the government-wide FedRAMP cloud security authorization program for U.S. agencies and cloud service providers.
• B. Federal Information Security Modernization Act of 2014
  The Federal Information Security Modernization Act of 2014 is a U.S. law that updates and strengthens federal government information security practices by clarifying agency responsibilities, enhancing oversight, and modernizing the framework for protecting federal information systems.
• C. Controlled Unclassified Information program
  The Controlled Unclassified Information program is a U.S. federal initiative that standardizes how sensitive but unclassified information is marked, handled, and protected across government agencies and their partners.
• D. NIST SP 800 series
  The NIST SP 800 series is a collection of special publications from the U.S. National Institute of Standards and Technology that provide guidelines, recommendations, and technical specifications for information security and risk management.
• E. National Security Risk Assessment process
  The National Security Risk Assessment process is a systematic government framework for identifying, evaluating, and prioritizing threats and hazards to a nation’s security to inform policy and preparedness.
• F. None of above. chosen
• G. Unsure - the case is ambiguous/there is not enough information to decide.

Target entity: Federal Risk and Authorization Management Program
Target entity description: The Federal Risk and Authorization Management Program (FedRAMP) is a U.S. government-wide framework that standardizes security assessment, authorization, and continuous monitoring for cloud products and services used by federal agencies.

• A. FedRAMP Program Management Office
  The FedRAMP Program Management Office is the federal team that oversees and manages the government-wide FedRAMP cloud security authorization program for U.S. agencies and cloud service providers.
• B. Federal Information Security Modernization Act of 2014
  The Federal Information Security Modernization Act of 2014 is a U.S. law that updates and strengthens federal government information security practices by clarifying agency responsibilities, enhancing oversight, and modernizing the framework for protecting federal information systems.
• C. Controlled Unclassified Information program
  The Controlled Unclassified Information program is a U.S. federal initiative that standardizes how sensitive but unclassified information is marked, handled, and protected across government agencies and their partners.
• D. NIST SP 800 series
  The NIST SP 800 series is a collection of special publications from the U.S. National Institute of Standards and Technology that provide guidelines, recommendations, and technical specifications for information security and risk management.
• E. National Security Risk Assessment process
  The National Security Risk Assessment process is a systematic government framework for identifying, evaluating, and prioritizing threats and hazards to a nation’s security to inform policy and preparedness.
• F. None of above. chosen