{"id":"FR1912051231","name":"Federal GovCloud (FGC) DevSecOps","provider":"TechTrend, Inc.","providerSlug":"techtrend-inc","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2021-07-06","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":[""],"assessor":"Emagine IT","assessorId":"137046","smallBusiness":true,"website":"https://techtrend.us/","description":"Federal GovCloud DevSecOps (FGC DSO) combines an array of tools, integrates them together under the FedRAMP umbrella and provides a complete software-as-a-service solution to include hosting, patching and help desk support. FGC DSO enables U.S. federal government agencies to easily adopt practices to enhance software supply chain with a solution to automate development, security, and operations (DevSecOps) practices through every phase of the software development life cycle. FGC DSO SaaS enables rapid adoption of a continuous integration and continuous deployment (CI/CD) pipeline to deliver high quality citizen and public applications through its integrated security validation tools as a managed service. It resides on a FedRAMP authorized government cloud infrastructure and is provisioned as a dedicated suite of tools leveraging a suite of tools and technologies that provide the foundation to implement DevSecOps. Landing zones for applications are cloud vendor agnostic and the FGC DSO platform supports application deployments and secure management of infrastructure on Azure, Amazon Web Services, Google Cloud, low-code platforms (e.g., Power Platform), and on-premises or hybrid environments. \n\nFGC DSO has an integrated software factory capability which provides a managed hosting environment for PaaS services as part of the FGC DSO security authorization boundary that allow agencies to obtain application landing zone cloud hosting while meeting zero trust requirements. With FGC DSO, Federal agencies can focus on developing repeatable, modern, and secure applications to support their missions by utilizing a turnkey platform that help to meet federal security mandates. Leveraging FGC DSO will speed up agile application development, security compliance, integration testing, deployment and secure operational monitoring.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/TechTrend%20Logo.png","inMarketplace":true,"agencies":["22-034"],"reuseCount":0,"leverages":["FR1823149273","F1206081364","F1603087869"],"leveragedBy":[],"timeline":[{"date":"2019-10-01","to":"FedRAMP Ready","certType":"Rev5"},{"date":"2020-12-17","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2021-02-23","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2021-07-06","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Emagine IT"},"sponsor":"22-034","trustCenterCheck":null}