U.S. government FISMA compliance was an outdated paper-based standard
Teresa Carlson · a16z Podcast | The Cloud and The Public Sector · Jan 2, 2019 · at 2:19
Teresa Carlson, Vice President of Worldwide Public Sector at AWS, discusses how the U.S. government transitioned from legacy FISMA compliance mandates to FedRAMP for cloud adoption.
0:00 / 0:20exact quote · 20.2s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“They had sort of an outdated security and compliance model called FISMA, which was a paper-based model, which was a law, a mandate for how they looked at security and compliance, and then they moved to this model for cloud called FedRAMP, and FedRAMP is really a model that takes in controls.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Teresa Carlson
Excessive government compliance standards lock startups out of innovation
“Because we do worry sometimes that if you put too many standards in place, it stagnates both innovation and you're not allowing startup companies to get into that innovative cycle because it sheds them out because their costs get so high on trying to meet a”
AWS built the U.S. Intelligence Community cloud using standard commercial architecture
“The intelligence community is a cloud that we built. It's exactly like any cloud that we built around the world. It's just on their own network. So by sense, it's their own private cloud, but it is just like any other AWS region. It's just on a different netwo…”
The hybrid cloud model will remain prevalent for a long time
“Well, in terms of the hybrid cloud model, we believe that's around for a long time, because customers, you know, they're not going to transition overnight, and they need to be able to take advantage of what they built over the years.”
Paper-based security compliance is outdated immediately upon printing
“The minute you print it out, it's outdated. You want to look at security and compliance in a continuous manner, right? You want, that's automation, the mechanisms of doing that, and that's what cloud is.”
UK government mandated a 'why not cloud' requirement for tech procurements
“Liam Maxwell, who's the CTO of the UK government, sort of started the same kind of trend in the UK where he said, we are spending way too much money on tech and not getting the benefits. They've created their own digital service, and they're starting to put al…”
Middle East startups need business mentoring more than technical support
“The Middle East, I think, is a really good example of what we had to do there was a little bit different. We actually had to create a model for mentoring in terms of business mentoring, because they have some businesses that are really start-uppy there, but we…”