The Federal Risk and Authorization Management Program provides a stan- dardized approach to security assess- ments  authorizations and continuous monitoring for cloud products and services It is meant to replace the cur- rent process by which agencies assess low- and moderate-baseline third-party cloud service providers (CSPs) prior to procurement