Seguridad Mania.com - España y América Latina
Portal sobre tecnologías para la seguridad física
- Destacamos »
- software Anti Blanqueo
PR Newswire
INDIANAPOLIS, March 15, 2022
INDIANAPOLIS, March 15, 2022 /PRNewswire/ -- Today StateRAMP announced its growing list of states who are working with StateRAMP to validate the cybersecurity posture of their third-party suppliers who use or offer cloud products to deliver services.
StateRAMP launched in early 2021 and one year later, an expanded list of state and local municipalities are working with StateRAMP to validate provider's cloud-based solutions to ensure all baseline cyber requirements are met.
Leading states include:
With responsibilities for critical infrastructure, vital services, and mass storage of confidential data, government, at all levels, is a prime target for cybercrime.
"2021 was a record-breaking year for data breaches and software supply chain attacks," said Steve Nichols, Chief Technology Officer at the Georgia Technology Authority. "As cybersecurity threats and risks have increased, state and local governments must ensure the suppliers they work with are able to meet minimum cyber requirements."
StateRAMP provides state and local governments assurance that the suppliers they are working with meet the minimum cybersecurity standards through independent audits and ongoing continuous monitoring.
"Until StateRAMP, there was not a standardized method to provide state and local governments consistent, independent, and ongoing validation of a product's cyber posture," said J.R. Sloan, Chief Information Officer for the State of Arizona. "2That left states on their own, expending valuable resources evaluating vendor compliance. StateRAMP allows us to work together with our counterparts in other states and in the vendor community toward a common standard."
StateRAMP is designed as a shared service for government and a streamlined service for suppliers who can verify their products one time and reuse that certification with each government agency they serve.
"Cybersecurity is a team sport. The bad actors are working together, why can't we?" said Chance Grubb, Senior Staff Officer/OK-ISAC Lead, Oklahoma Cyber Command, Office of Management and Enterprise Services. "Being able to partner with StateRAMP allows us to better protect citizen data and infrastructure."
"StateRAMP is a great example of what needs to take place to help us defend against attack," said Rob Main, State Chief Risk Officer for the State of North Carolina.
"At launch one year ago, our goal was to work with three to five states in the first year. The level of interest in StateRAMP is far surpassing our expectations and incredibly exciting," said Leah McGrath, Executive Director of StateRAMP. "Our team feels truly honored to be a part of this effort helping strengthen cybersecurity across the nation."
About StateRAMP
StateRAMP is a nonprofit organization that launched in early 2021 and brings state and local governments together with the suppliers who serve them to recognize best practices in cloud security and provides a standardized approach to cloud cybersecurity verification. StateRAMP helps state and local governments reduce cyber risks from unsecure cloud solutions, and benefits service providers by creating a "verify once, use many" approach to cloud security and risk assessment.
StateRAMP maintains an Authorized Vendor List (AVL) which lists products that have achieved a security status and those products going through the process. Learn more at www.stateramp.org.
View original content to download multimedia:https://www.prnewswire.com/news-releases/states-working-with-stateramp-to-validate-supplier-cybersecurity-compliance-301502971.html
SOURCE StateRAMP
Publicamos interesante Informe de más de 48 págs y varios videos demostrativos sobre los posibles ataques a los robots de montaje de las fábricas. ... Leer más ►
Publicado el 22-Jun-2017 • 10.48hs
Publicado el 20-Jun-2017 • 20.22hs
Dirigido tanto a los principiantes, como a los expertos en seguridad informática y sistemas de control industrial (ICS), este libro ayudará a los lectores a comprender mejor la protección de normas de control interno de las amenazas electrónicas. ... Leer más ►
Publicado el 3-Ene-2012 • 20.16hs
Publicado el 25-Set-2009 • 01.26hs
Publicado el 17-Dic-2008 • 08.32hs