Entropy scoring & verification
FedRAMP (Federal Risk and Authorization Management Program)
The U.S. federal government’s program for a standardized security assessment and authorization of the cloud services federal agencies use. Authorizations come at Low, Moderate and High impact levels; High is the level for systems where a compromise could have a severe or catastrophic effect — such as law-enforcement, emergency-services, financial and health data — and is the level Entropy tracks. Authorized services are listed publicly on the FedRAMP Marketplace. It matters mainly to vendors selling cloud services to federal agencies, so Entropy counts it toward a vendor’s Governance score only when an admin has marked it as applicable to that vendor.