Cisco Safety’s Path to FedRAMP Licensed Class D (Excessive) and Zero Belief.

In an period the place digital agility is synonymous with mission success, Cisco is proud to function a cornerstone of the U.S. public sector’s modernization journey. We acknowledge that authorities companies function below the very best requirements of safety and accountability; that’s the reason now we have prioritized the supply of FedRAMP Licensed Class D (Excessive) options throughout key gives of our safety portfolio. By offering a safe, compliant basis that bridges the hole between legacy infrastructure and cloud-native innovation, we’re enabling companies to implement Zero Belief rules and speed up digital transformation with confidence. Our dedication goes past know-how—we’re devoted to making sure that federal, state, and native companies have the strong, verified, and scalable Zero Belief platform options mandatory to guard the nation’s most delicate knowledge whereas delivering seamless, resilient providers to the general public.

Cisco is proud to announce a major milestone in our dedication to the U.S. Public Sector: the uplift of our key safety gives inside our safety portfolio from FedRAMP Licensed Class C (Average) to FedRAMP Licensed Class D (Excessive).

This transition gives federal companies and contractors with the improved safety required for his or her most delicate, mission-critical, unclassified knowledge. By reaching this “Class D Certification” baseline throughout a set of built-in options, Cisco is enabling a seamless transition to a mature Zero Belief structure assembly the excessive requirements of the CISA Zero Belief Mannequin.

The Energy of FedRAMP Excessive

Whereas FedRAMP Licensed Class C (Average) is the usual for a lot of civilian companies, FedRAMP Licensed Class D (Excessive) is designed for programs the place a breach may have catastrophic results. This consists of legislation enforcement, emergency providers, healthcare, and monetary programs. By assembly the 421 safety controls required for the Class D Licensed baseline, Cisco helps be certain that companies can shield delicate Personally Identifiable Info (PII) and Managed Unclassified Info (CUI) with the very best stage of cloud safety rigor.

A Zero Belief Basis for the Fashionable Mission

On the coronary heart of this authorization uplift is Cisco’s dedication to Zero Belief. Our technique facilities on the philosophy of “by no means belief, at all times confirm.” By integrating FedRAMP Excessive licensed options, companies can implement granular entry insurance policies, keep steady visibility, and scale back the assault floor throughout customers, gadgets, and purposes.

Zero Belief represents a basic shift from conventional, perimeter-based safety to a mannequin centered on id and context. In a FedRAMP Excessive surroundings, the place the stakes of a knowledge breach are extreme, this mannequin helps be certain that no consumer or gadget is granted entry to assets till they’re totally authenticated, and their safety posture is validated. By implementing least-privileged entry, these options may also help companies stop lateral motion by attackers and preserve delicate knowledge remoted and guarded, even within the occasion of a compromised credential.

Cisco’s safety portfolio is particularly designed to align with the CISA Zero Belief Maturity Mannequin (ZTMM) throughout its 5 foundational pillars: Id, Units, Community/Surroundings, Utility Workload, and Information.

Our FedRAMP Licensed Class D (Excessive) options present the visibility and automatic coverage enforcement mandatory to maneuver companies from “Conventional” to “Superior” and “Optimum” maturity ranges. By integrating menace intelligence from Cisco Talos and offering cross-pillar visibility, Cisco helps companies meet the rigorous necessities of Government Order 14028 and the M-22-09 mandate, making a resilient defense-in-depth technique.

Cisco’s newly uplifted FedRAMP Excessive ecosystem

• Cisco Safe Entry for Authorities: As a premier Safety Service Edge (SSE) answer, Safe Entry gives a ZTNA-first method that simplifies the consumer expertise whereas imposing strict Zero Belief rules. It permits seamless, safe entry to all personal and public purposes, serving to companies be certain that customers are verified and licensed at each step. By hiding purposes from the general public web and offering a unified agent, it reduces the assault floor and eliminates the friction usually related to legacy VPNs.

Cisco Safe Entry for Authorities has a multi-layered protection beginning on the DNS layer to dam threats earlier than a connection is ever established. Now licensed on the FedRAMP Excessive stage, it integrates Safe Net Gateway (SWG), Cloud Entry Safety Dealer (CASB), and cloud-delivered firewall capabilities. This enables companies to guard towards subtle web-based assaults, handle shadow IT, and forestall knowledge exfiltration throughout a distributed workforce.

• Cisco Safety Cloud Management – Firewall Administration: Previously generally known as Protection Orchestrator, this answer permits for constant coverage administration throughout your complete federal enterprise. Cisco Safety Cloud Management – Firewall Administration gives a centralized administration airplane that simplifies firewall coverage orchestration, enabling constant safety posture throughout your complete infrastructure. By automating complicated change administration processes and offering unified visibility, we empower companies to scale back configuration errors, speed up compliance reporting, and strengthen their Zero Belief structure.
• Cisco Multicloud Protection: As federal companies speed up their digital transformation, the complexity of securing workloads throughout AWS, Azure, and GCP has turn into a vital problem. Cisco Multicloud Protection simplifies safety technique by offering a unified material that ensures constant coverage enforcement and deep, actionable visibility throughout cloud environments. Cisco Multicloud Protection is now accessible with rigorous requirements of FedRAMP Licensed Class D (Excessive).

Securing the #1 Menace Vector: Cisco Safe E mail Menace Protection

We’re additionally excited to announce that Cisco Safe E mail Menace Protection has formally achieved FedRAMP Licensed Class D (Excessive). E mail stays the first entry level for superior threats, together with phishing and ransomware. With Cisco Safe E mail Menace Protection for Authorities licensed on the Licensed Class D (Excessive) FedRAMP stage, companies can leverage industry-leading menace intelligence and automatic remediation to assist shield their most focused communication channel and sustaining safety for even essentially the most delicate correspondence.

Cisco Safety Cloud for Authorities

Cisco Safety Cloud for Authorities is a unified authorization boundary that integrates varied Cisco safety providers, making certain that organizations can shield their customers, gadgets, and purposes no matter the place they reside. Authorities companies can leverage the complete suite of safety merchandise below the Cisco Safety Cloud for Authorities authorization.

The Cisco Safety Cloud for Authorities ecosystem is designed to fulfill the rigorous safety necessities of the general public sector and extremely regulated industries.

Cisco Duo Federal Excessive

Cisco Duo Federal Excessive is Cisco’s FedRAMP-authorized multi-factor authentication (MFA) answer tailor-made to public sector organizations. It delivers sturdy cloud-based authentication and gadget visibility that meet the stringent safety necessities of federal companies. Duo Federal helps FIPS 140-2/3 and NIST SP 800-63-3 compliance, together with authentication assurance ranges AAL2 and AAL3, with help for biometric and {hardware} token authenticators.

In contrast to industrial variations, Duo Federal restricts telephony-related options and requires authentication by way of Duo Push on smartphones, {hardware} tokens, or passkeys. It enforces strict safety insurance policies akin to role-based and location-based entry, biometric enforcement, and gadget hygiene checks, serving to companies implement zero-trust safety fashions.

Cisco Safety Cloud Management (SCC)

Cisco Safety Cloud Management (SCC) has additionally achieved Class D (Excessive) standing. SCC is a centralized platform designed to unify the administration, coverage orchestration, and visibility of your Cisco safety investments. It’s important for organizations trying to simplify their safety structure by reworking the administration of complicated, distributed environments right into a extra environment friendly and cohesive course of.

Key Features of Safety Cloud Management:

• Unified Visibility and Administration: SCC gives a single dashboard to supervise safety insurance policies, configurations, and telemetry throughout hybrid and multi-cloud environments.
• Constant Coverage Enforcement: It permits directors to outline safety insurance policies as soon as and deploy them persistently throughout totally different parts of the Cisco safety portfolio.
• Streamlined Operations: Elevated effectivity permits groups to concentrate on proactive menace searching and strategic safety initiatives somewhat than guide configuration administration.
• Platform Integration: Because the administration layer of the Cisco Safety Cloud, SCC is designed to combine seamlessly with varied Cisco safety options.

Seamless Uplift: Safety With out the Friction

One of the crucial vital benefits of Cisco’s method is that this transition is an environmental uplift, not a migration.

For present prospects, this implies:

• No Operational Hurdles: The improve to the backend infrastructure is utilized robotically.
• No SKU Adjustments: Companies can transition to a better safety posture with out the necessity to exchange merchandise or re-configure core options.
• Unified Compliance: A single, high-security ecosystem that simplifies the trail to assembly Government Order 14028 and M-22-09 mandates.

Cisco a Trusted Accomplice for Defending Crucial Infrastructure, Cloud and Functions

Cisco’s ongoing funding in FedRAMP Licensed Class D (Excessive) options displays our unwavering dedication to the U.S. authorities’s safety mission. By integrating Cisco Safe Entry (SSE) for complete SASE, Cisco Safety Cloud Management – Firewall Administration for centralized firewall administration, Multicloud Protection for constant workload safety, E mail Menace Protection for superior, proactive safety, Cisco Duo Federal Excessive for MFA, and Cisco Safety Cloud Management for unified administration, we offer a Zero Belief-aligned platform that simplifies the complexity of recent authorities operations. Because the federal panorama continues to evolve towards extra stringent safety frameworks and better Impression Ranges, Cisco stays your trusted associate—empowering companies to speed up digital transformation, safe distributed workforces, and safeguard the mission-critical knowledge that powers our nation.