The Office of the Comptroller of the Currency, the bureau of the Department of Treasury that regulates national banks and federal savings associations, issued two requests for information on security-based cloud solutions on April 2, 2018.
The first RFI is for a cloud access security broker solution, which acts as a gatekeeper between an organization’s on-premises network and a cloud provider’s infrastructure. According to the information request, the OCC currently has a hybrid environment for its information services and is looking to find out how many companies are interested in and capable of providing that intermediary security solution.
Companies looking to respond to the request will have to demonstrate how their solution handles encryption, Federal Information Security Management Act controls, auditing and other technical capabilities.
The second RFI is for a cloud-based solution for identity access management as a service, which controls user access to different parts of a network.
According to the RFI, the OCC operates applications across both legacy systems and the cloud, which are accessed by OCC employees and external users, such as national banks and financial regulators. Respondents will have to address how they would support audits across this hybrid environment.
Responses to both RFI’s are due April 16, 2918.
Jessie Bur covers federal IT and management.
In Other News
