본문 바로가기 주메뉴 바로가기
22대 대한민국 국회 국회정보길라잡이 국회의원검색
회원가입 로그인
HOME

정보검색

소장정보 검색

국회도서관 홈으로 정보검색 소장정보 검색

결과 내 검색

동의어 포함

고급검색

인명/단체명

저자정보 상세정보
인명/단체명을 입력하세요.

키워드

  • 대표어

  • 외국어

-

목차보기

Title page 1

Contents 3

Highlights 2

Letter 6

Background 9

Federal Legislation and Guidance on Cloud Service Cybersecurity 9

Modernization of FedRAMP through the FedRAMP 20x Initiative 11

Agencies Can Select from Various Cloud Service Models 14

Guidance on Key Cloud Security Practices 14

Agencies and Providers Share Cybersecurity Responsibilities 16

GAO Has Previously Reported on Agencies' Efforts to Secure Cloud Systems 17

Selected Agencies Have Not Fully Implemented Key Cloud Security Practices 19

Agencies Did Not Fully Implement Continuous Monitoring for Their Selected Systems 21

Three of Four Agencies Did Not Fully Document Incident Response and Recovery Procedures for Their Selected Systems 24

Half of the Agencies' Service Level Agreements Defined Performance Metrics for Both Selected Systems 27

Conclusions 29

Recommendations for Executive Action 30

Agency Comments and Our Evaluation 32

Appendix I: Objective, Scope, and Methodology 34

Appendix II: Comments from the U.S. Department of State 38

Appendix III: Comments from the U.S. Department of Transportation 41

Appendix IV: Comments from the Department of Veteran Affairs 42

Appendix V: GAO Contact and Staff Acknowledgments 46

Tables 3

Table 1. Agency Implementation of Continuous Monitoring Practices 22

Table 2. Agency Documented Procedures for Responding to and Recovering from Security and Privacy Incidents for the Cloud System 25

Table 3. Agency Implementation of a Service Level Agreement (SLA) with Cloud Service Provider That Defined Performance Metrics 28

Table 4. Evaluation Criteria Associated with Key Cloud Security Practices 36

Figures 4

Figure 1. Timeline of Guidance and Future Plans for the Federal Risk and Authorization Management Program (FedRAMP) as of April 2026 13

Figure 2. Shared Responsibilities Between Agencies and Cloud Service Providers Within Key Cloud Security Practices 17

Figure 3. Summary of Selected Agencies' Implementation of Key Cloud Security Practices 20

추천서가 (다양한 추천 자료를 만나보세요)

권호기사보기

권호기사 목록 테이블로 기사명, 저자명, 페이지, 원문, 기사목차 순으로 되어있습니다.
기사명 저자명 페이지 원문 기사목차

권호

기사명 원문보기 기사목차
닫기