Skip to content

Unqork’s CISO on Gaining FedRAMP® Authorization

Daniel Wood, Unqork’s Chief Information Security Officer (CISO), answers questions about the opportunity that Unqork’s FedRAMP authorization brings to federal agencies

Daniel Wood, Unqork’s Chief Information Security Officer (CISO), answers questions about the opportunity that Unqork’s FedRAMP authorization brings to federal agencies, how Unqork was able to gain authorization so quickly, and what authorization means for Unqork’s commercial customers. 

Now that Unqork has FedRAMP authorization, what does it mean for Federal Agencies?

Daniel Wood: Because Unqork has achieved FedRAMP authorization, government departments and agencies can now use Unqork’s enterprise codeless platform to build mission-critical applications faster with complexity, scalability and upgradability, all without seeing a single line of code. 

To obtain FedRAMP authorization, Unqork went through a series of rigorous security assessments, including secure architecture review, vulnerability assessment, penetration testing by a third-party assessment organization (3PAO), and in-depth security documentation reviews.  

Unqork demonstrated compliance with over 300 security controls across 20 different control families. These controls are designed to ensure the confidentiality, integrity, and availability of sensitive government data stored and processed by Unqork.

 

Unqork achieved FedRAMP certification in two years. That’s super fast. How did that happen?

From the founding of Unqork, we have always prioritized security for our customers' applications and the data they trust with us. Through robust collaboration of our engineering and security functions, we were able to make purposeful decisions grounded in secure processes and adherence to industry best practices and standards. And this allowed us to meet federal requirements comprehensively and rapidly.

Daniel WoodWhat IaaS environments does Unqork’s FedRAMP environment work with? And what FedRAMP Impact Level is Unqork?

Unqork currently has authorization to operate within AWS GovCloud for moderate (IL2) systems.  

How would an agency go about obtaining Unqork services? 

Getting the authorization package is the first step for Federal Agencies to start the process. They can request the package from the FedRAMP Marketplace. They can find a link to make a request on the Unqork FedRAMP Marketplace listing

Does FedRAMP have security implications for commercial customers? 

Achieving our FedRAMP Authorization to Operate (ATO) demonstrates Unqork's commitment to security and compliance. It also positions Unqork as a trusted provider of commercial digital transformation solutions.  

To obtain our ATO, the Unqork platform has undergone a rigorous security assessment and been deemed compliant with the Federal Risk and Authorization Management Program (FedRAMP) security standards. This designation confirms that we have taken security seriously and have made significant investments in security controls, processes, and procedures to protect our customer data.

Ready to learn about the value of Unqork’s Codeless as a Service platform for Federal Agencies? Schedule a personalized demo

Take a self-guided tour of Unqork's Codeless-as-a-Service (CaaS) platform

Suggested Content

blog

Mastering the Project Management Triangle: On Time, On Budget, and On Value

3 mins read
Read article
blog

Say Goodbye to COBOL: Harness the Power of Gen AI to Migrate Legacy Apps to Unqork's Future-Proof Platform

4 mins read
Read article
blog

Why Unqork Just Became the First Enterprise-Grade Dev Platform to Provide Open-Source Spec

3 mins read
Read article
blog

The Difference Between Enterprise Apps and Consumer Apps

3 mins read
Read article
blog

The True Costs of Maintaining Legacy Systems

4 mins read
Read article
blog

Why Do So Many Banks Still Use Excel?

3 mins read
Read article
blog

Introducing Unqork Academy

3 mins read
Read article
blog

How Unqork Uses AI and Machine Vision to Drive Powerful Automation

3 mins read
Read article
blog

Unqork in 60 Seconds

Read article
blog

The Importance of Penetration Testing

5 mins read
Read article