Q: How should cloud service providers transition from the traditional POA&M process to the new VDR/VER process?
A: Inform your agencies of the planned changes before they happen. If you have a continuous monitoring charter, update your charter to reflect the changes in process, documentation, and meeting periodicity. Outline expectations for all parties. Do not email FedRAMP to let us know.
