Develop FedRAMP position papers based on cloud.gov's experience and observations

[pburkholder]

In order to support secure cloud adoption across the U.S. government, we want to provide feedback to advisory bodies on FedRAMP's strengths, and gaps.

Still need to determine the best audience for these, and who should contribute.

Acceptance Criteria

At least 2 of the following by June 30, 2023

• marketplace distribution
• Develop informal position paper on FIPS 140 cryptography #2532
• small CSP experience
• significant changes
• 3paos
• government community clouds

---

Security considerations

None. Documentation only.

[pburkholder]

Related issues: cloud-gov/private#1166 cloud-gov/private#598 cloud-gov/cg-site#2074

[pburkholder]

Closing this since it's no longer needed. Our program has done pretty well commenting on relevant proposals, and the addition of the senior level Cloud Strategy position at TTS helps with the translation from our experience to FedRAMP policy and process that we don't need to do this.