Federal Cyber Experts Thought Microsoft’s Cloud Was “a Pile of Shit.” They Approved It Anyway.

submitted by Beep to technology 448 points | 44 comments https://www.propublica.org/article/microsoft-cloud-fedramp-cybersecurity-government

• “Cloud First” : To move federal agencies to the cloud, the government created a program known as FedRAMP, whose job was to ensure the security of new technology.
• Security Breakdown : ProPublica found that FedRAMP authorized a Microsoft product called GCC High to handle sensitive government data, despite years of concerns about its security.
• Potential Conflict of Interest : The government relies, in part, on third-party firms to vet cloud technology, but those firms are hired and paid by the company being assessed.