Kratos has over 10 years of experience serving as a trusted independent FedRAMP 3PAO partner for Cloud Service Providers (CSPs) seeking to obtain or maintain FedRAMP Authorization for their cloud service offerings. Services include: • Readiness Assessment (33 completed as of August 2024) • Initial Assessment (71 completed as of August 2024) • Annual Assessment (146 completed as of August 2024) • Significant Change Request (SCR) validation and assessment • Service Onboarding validation and assessment • FedRAMP Baseline and DoD Impact Level uplift assessment • Gap Assessment • Continuous Monitoring Validation • Penetration Testing • Red Teaming • Secure Software Development Framework (SSDF) Attestation • Multi-framework Assessment and Attestation Service Models supported: IaaS, PaaS, SaaS Impact Levels supported: FedRAMP Tailored Li-SaaS, Low, Moderate, and High; DoD Impact Levels 2, 4, 5, and 6 (Secret) AO Stakeholders supported: FedRAMP Board and PMO, DoD JVT and DSAWG, and over 30 civilian and DoD agency sponsors Kratos delivers 3PAO assessment services, including readiness assessments, initial assessments, annual assessments, significant change request (SCR) assessments, penetration testing, red teaming, and continuous monitoring validation & attestation. Kratos provides full scope support from assessment planning, execution of testing, evaluating risk, and submission of a final report to accompany the complete Authority to Operate (ATO) package.
With 63 active assessment engagements in the current export, this firm ranks #5 of 48 by volume (top 92%) — above the field average of 17 active CSOs per firm.
Beyond FedRAMP, the Marketplace export lists this firm as offering assessment or certification services for: