Hello SAFHER Community,
Now that we have development underway, we’re looking to the future and planning ahead. Many of your states have designated security requirements, and the SAFHER Team is working to create a security information package to assist with your State Information Security team’s conversations.
In order to provide you with the best information, please help us answer the following questions. You’ll need to reach out to your IT Security organization or your Chief Information Security Officer’s (CISO’s) office for help in answering.
The basis of the SAFHER security information will be StateRAMP. Visit their website for more information about StateRAMP.
Please ask these questions:
- Will a SAFHER “State” ramp information packet meet the needs of your state’s process and requirements?
- If the State Ramp package won’t meet all of your needs for your state’s security requirements, what is missing? How can we augment the State Ramp material?
To help provide some additional information on this request, the team has a brief video explaining what to ask for when you reach out to your IT organization or CISO here. By sharing your security requirements for onboarding a new IT application within your state, the SAFHER team will develop the State Ramp package with all needs in mind.
Please share your state’s response or questions by emailing SAFHER@afdo.org by 6/30/24. The SAHFER team is hopeful that this kind of due diligence and proactive assessment will minimize delays in your state’s SAFHER adoption.
Until next week,
Kellie P. Isaac
SAFHER Director