FedRAMP

The US federal program that authorizes cloud services for government use against a standard set of security controls. Cloud products sold to US agencies usually need a FedRAMP authorization.

Related terms

SOC 2

An audit report on a service provider’s security, availability and confidentiality controls, issued under US AICPA standards. Buyers of SaaS and hosting often ask for a SOC 2 Type II report.

IRAP

The Infosec Registered Assessors Program, under which assessors check cloud and IT systems against Australia’s Information Security Manual for government use.