We are a CSP in the process of defining the boundary. No one in my organization has prior FedRAMP experience. We are relying heavily on a consulting advisor to guide us but they are only providing canned responses back. Is this expected, because yes ultimately it is our say in what we do, or are there advisory services that will actually internalize what we do, what we are trying to achieve, and give us a tailored recommendation that 1. best serves our sponsor 2. best fits our market differentiators 3. meets the Fed requirements? Are we expecting too much or have we selected not the right partner?
[link] [comments]