Joint Interoperability Test Command looks for cloud certification

WHAT: A sources sought notice for consulting services to determine if the Joint Interoperability Test Command can be a third-party assessment organization (3PAO) for cloud security.

WHY: With greater adoption of cloud services across government comes greater demand for third-party certifiers. 3PAOs are accredited assessors of compliance with the Federal Risk and Authorization Management Program, a government-wide program for cloud security. Given that JITC is major hub for testing IT and national security systems, it makes sense for the command to expand its portfolio to fast-growing cloud products and services. 

Respondents to the notice should have the “ability to assess JITC’s physical environment, internally developed system security plan, test case documentation created based on a test of the security plan and provide a system assessment report,” the notice said.

Responses are due Aug. 6. Click here to read the notice.