We are pleased to share with you that the Sumo Logic Continuous Intelligence Platform™ was granted authority to operate at a Federal Risk and Authorization Management Program (FedRAMP) Moderate impact level.
With this authorization, many more organizations can now use Sumo Logic to get real-time insights into complex on-premises and cloud environments, and further strengthen their security and compliance, while optimizing their operational performance.
Sumo Logic offers a distinct public cloud offering built out to and operated in accordance with NIST 800-53 FedRAMP-Moderate framework. This framework is not new to Sumo Logic, as we remained in adherence to the framework throughout this journey and commit to maintaining the Authorization.
Commercial entities can now adopt Sumo Logic Continuous Intelligence Platform to serve their US Federal customers with workloads up to FedRAMP Moderate Impact Level.
Security and Continuous Monitoring of Cloud Services
FedRAMP standardizes security assessment, authorization, and continuous monitoring for cloud computing services. With Sumo Logic Continuous Intelligence Platform, US federal agencies and commercial, alike, can realize their digital transformation, modernization outcomes and confidently transition from legacy on-premise systems to more scalable and secure, cloud-based architectures.
The FedRAMP Moderate authorization evaluates solutions across 325 controls, 17 families from NIST SP 800-53 and authorized solutions makes it possible for federal agencies and other industries in regulated environments to adopt leading continuous intelligence solutions.
FedRAMP Moderate Authorization covers 17 families and 325 baseline controls from NIST SP 800-53 |
|
Access Control Audit and Accountability Awareness and Training Security Assessment and Authorization Configuration Management Contingency Planning Identification and Authentication Incident Response Maintenance |
Media Protection Physical and Environmental Protection Planning Personal Security Risk Assessment System and Services Acquisition Systems and Communications Protection Systems and Information Integrity |
Security-By-Design
Sumo Logic’s security-by-design approach includes a secure cloud-native, multi-tenant platform that helps with data-driven decisions and reduces time to deploy, investigate security and operational issues. Our strong commitment to security is validated by the platform’s third-party compliance attestations and certifications, including PCI DSS 3.2.1, SOC 2 Type 2, HIPAA, ISO 27001 Certification, CSA STAR Level 2, EU Privacy Shield, and now FedRAMP-Moderate Authorized.
Security Intelligence and Operations Intelligence Solutions
Our Continuous Intelligence platform offers Operations Intelligence solutions empowering DevOps and DevSecOps teams to monitor and troubleshoot applications and infrastructure across logs and metrics to reduce downtime, improve performance, software development velocity and secure mission critical workloads with a predictable licensing model without unexpected on-demand charges or hidden costs.
![](https://assets-www.sumologic.com/landing-pages/fedramp_kubernetes_cluster_overview.png)
We alleviate modern security challenges with real-time analytics and insights from a single, cloud-native platform across multiple use cases that speeds decision-making and drives world-class customer experiences. Our cloud-native solution supports the entire spectrum of security use cases—from logging compliance data, to monitoring and securing hybrid clouds, to delivering market-leading Security Incident Event Management (SIEM) capabilities.
![](https://assets-www.sumologic.com/landing-pages/fedramp_aws_security_overview.png)
Find Out How Sumo Can Help You
No matter where you are on your cloud computing journey, Sumo Logic can help you provide continuous intelligence, helping you achieve your goals.
Contact us to find out how you can benefit from Sumo Logic’s FedRAMP Moderate authorized platform-based Security and Operations Intelligence solutions.
Girish Bhat
Vice President, Sumo Logic
@girishb
Complete visibility for DevSecOps
Reduce downtime and move from reactive to proactive monitoring.