In the December, 2023 clarifying memo from the DoD CIO, David McKeown, they are basically providing guidance that all contractors and sub-contractors for the DoD can only use a minimum of FedRAMP Moderate authorized cloud services for storing/processing any CUI data. See https://dodcio.defense.gov/Portals/0/Documents/Library/FEDRAMP-EquivalencyCloudServiceProviders.pdf
If you are a cloud service provider, have you seen any increase in demand for FedRAMP Moderate authorization? Have you started to get questions about FedRAMP authorization from your customers in the DIB?
[link] [comments]