Deltek's Journey to FedRAMP Moderate Equivalency

About this episode

Michael Greenman from Deltek shares insights on achieving FedRAMP Moderate Equivalency in the final episode of the GRC Academy podcast.

I have a surprise for you --- the last GRC Academy podcast! In this last episode, Michael Greenman from Deltek shares the journey to FedRAMP Moderate Equivalency for Deltek Costpoint GovCon Cloud Moderate (GCC-M). And let me tell you, it's quite a story: changes in the control baseline, new policy from the DoW, and lessons learned. Here are some of the biggest takeaways: The real-world implications of DoW's equivalency definition How the absence of continuous monitoring shapes the trust model How Deltek developed a customer responsibility matrix that reduces friction for their customers Should the DoW blow up FedRAMP moderate equivalency? We also discussed improvements that can be made by the DoW, the Cyber AB, and more! We recorded this months ago, but this conversation is still very relevant. On another note, it is kind of surreal to think this is the last episode of the GRC Academy podcast. I hope you've enjoyed listening!! What were your biggest takeaways? Let me know in the comments. Follow Michael on LinkedIn: https://www.linkedin.com/in/michael-greenman-94952a3/ Deltek Costpoint GCC-M: https://www.deltek.com/en/government-contracting/costpoint/cloud ----------- Online GRC…

People in this episode

Host: Jacob Hill

Guest: Michael Greenman

Topics covered

• FedRAMP Moderate Equivalency
• Deltek Costpoint
• government contracting
• control baseline changes
• customer responsibility matrix
• continuous monitoring
• DoW policy

Keywords

• FedRAMP
• Deltek
• GovCon Cloud
• DoW
• continuous monitoring
• customer responsibility matrix
• equivalency definition
• control baseline
• Cyber AB

Mentioned in this episode

Organizations: Deltek, DoW, Cyber AB

Products: Deltek Costpoint GovCon Cloud Moderate (GCC-M)

More episodes of GRC Academy

• What's Next for GRC Academy and Jacob Hill · September 4, 2025 · 4 min
• The Business Case for CMMC - Surviving DOGE · June 19, 2025 · 53 min
• The Compliance Playbook to Cybersecurity · June 5, 2025 · 32 min
• How HITRUST Fixes What’s Broken in Cybersecurity Compliance · May 27, 2025 · 56 min
• CUI Masterclass with Ryan Bonner · May 9, 2025 · 51 min
• Small Business Achieves CMMC Level 2 Certification: Reynolds Construction's DIY Success Story · April 24, 2025 · 36 min