burakemir
TaggartPhenomenal reporting from ProPublica. Big takeaways:
- FedRAMP is too understaffed to be effective.
- Microsoft never answered serious questions about its cloud security architecture.
- Despite a damning report, Microsoft's government cloud product was approved anyway.
https://www.propublica.org/article/microsoft-cloud-fedramp-cybersecurity-government
Federal Cyber Experts Thought Microsoft’s Cloud Was “a Pile of Shit.” They Approved It Anyway.
A federal program created to protect the government against cyber threats authorized a sprawling Microsoft cloud product, despite the company’s inability to fully explain how it protects sensitive data.
Adam Williams