Kayne and Tom uncover the different approach to the Physical and Environmental controls, with a discussion of all-cloud, on prem and hybrid scenarios. Of course, they tackle a new beer as well, maybe Kayne will like this one, and maybe Tom will not… I think you already know!

Reference documents:

https://www.fedramp.gov/assets/resources/documents/FedRAMP_Security_Controls_Baseline.xlsx

▬ Contents of this video ▬▬▬▬▬▬▬▬▬▬

0:00 - Intro

0:55 - Beer background

1:48 - First beer impressions

3:55 - What is Physical and Environmental Protection in FedRAMP?

5:15 - How does it affect cloud-first organizations?

6:55 - What to do when you have a lack of access to data centers

7:40 - Are remote staff who have access to FedRAMP data covered under physical and environmental policies?

8:30 - what about things printed by printers?

12:00 - Beer ratings

The Drafting Compliance series:

To lighten the dark corners of compliance, hosts Kayne and Tom as share with you Hyperproof's journey to becoming FedRAMP moderate, an overall roadmap to achieve FedRAMP compliance in a year, and the tips and tricks they learn along the way. As if compliance isn't fun enough, the hosts also try out a new beer each episode and rate it on a scale from 1-10.