As federal agencies patiently await final modernization guidance from the Office of Management and Budget (OMB), the Federal Risk and Authorization Management Program (FedRAMP) finds itself navigating through a transitional period. Congressman Gerry Connolly (D-Va.), a staunch advocate for federal IT modernization and the author of the FedRAMP Authorization Act, voiced his concerns about the program's current limbo, attributed to the absence of OMB's final guidance and exacerbated by factors like agency backlogs and the unfilled directorial role at FedRAMP. Despite these hurdles, Connolly highlighted several positive strides, noting that the situation has evolved from 'the inferno' to a more stable 'limbo.' He remains hopeful about FedRAMP's trajectory and ongoing reforms, such as the Emerging Technology Prioritization Framework spearheaded by the General Services Administration.
Simultaneously, the White House is advocating for a substantial increase in cybersecurity budgets across federal agencies to fortify the nation’s defenses, aligning with the broader goals of the Biden administration's national cyber strategy. In a pivotal memo, OMB Director Shalanda Young and National Cyber Director Harry Coker Jr. called for agency budget requests to include significant enhancements to cyber defenses, including the adoption of zero-trust architectures and the bolstering of open-source software security. The memo underscores the critical need for investments in department-wide, enterprise solutions to unify cybersecurity efforts across various mission areas, facilitating better information sharing and bolstering the nation’s resilience against burgeoning cyber threats.