Bundes-Cyber-Experten nannten die Cloud von Microsoft einen „Haufen Scheiße“ und stimmten ihr trotzdem zu

I’m sure the company that makes people keep signing in to their accounts and can’t sync for shit does great things with security.

Wow this is pile of shit. Approved!

>*One FedRAMP reviewer compared it to a “pile of spaghetti pies.” The data’s path from Point A to Point B, the person said, was like traveling from Washington to New York with detours by bus, ferry, and airplane rather than just taking a quick ride on Amtrak. And each one of those detours represents an opportunity for a hijacking if the data isn’t properly encrypted.*

>*The team concluded, “There is a lack of confidence in assessing the system’s overall security posture.*

>*Despite the findings, to the FedRAMP team, turning Microsoft down didn’t seem like an option. “Not issuing an authorization would impact multiple agencies that are already using GCC-H*,” the summary document said. The team determined that it was a “better value” to issue an authorization with conditions for continued government oversight.*

*) GCC High, a secure cloud solution that meets the compliance requirements of government contractors.

sigh.

>In December, the department announced the indictment of **a former employee of Accenture** who allegedly misled federal agencies about the security of the company’s cloud platform and its compliance with FedRAMP’s standards. She has pleaded not guilty. **Accenture, which was not charged with wrongdoing**, has said that it “proactively brought this matter to the government’s attention” and that it is “dedicated to operating with the highest ethical standards.”

This smells like *fallguy* stuff. Not sure how an employee can be held personally liable when working for a private organization.

>The program was an early target of the Trump administration’s Department of Government Efficiency, which slashed its staff and budget. Even FedRAMP acknowledges it is operating “with an absolute minimum of support staff” and “limited customer service.” The roughly two dozen employees who remain are “entirely focused on” delivering authorizations at a record pace, FedRAMP’s director has said. Today, its annual budget is just $10 million, its lowest in a decade, even as it has boasted record numbers of new authorizations for cloud products.

Makes more sense now.

nothing to do with the gold lavished in the oval office bendover, right

They must like the smell.

>Monaco, the deputy attorney general who launched the department’s initiative to pursue cybersecurity fraud cases, did not respond to requests for comment.

She left her government position in January 2025. Microsoft hired her to become its president of global affairs.

Huh.