The Equivalency Memo: Watch at Your Own Peril (Especially if You Own a Small Business)

From the critic reviews, you can see that everyone is having different reactions to the Department of Defense’s memorandum titled “Federal Risk and Authorization Management Program Moderate Equivalency for Cloud Service Provider’s Cloud Service Offerings” In providing clarity, the DoD has also provided a good amount of heartburn for Cloud Service providers who know have to figure out how they are going to get their environments up to FedRAMP moderate standards. How the heck did we get to this CMMC/FedRAMP Mod plot line anyway?