Session 1 - FedRAMP Strategic Initiatives
(8:30am - 9:30am)
Presented by Brian Conrad (GSA FedRAMP)
FedRAMP has seen an incredible increase in the adoption of the program, which is marked by both an increase in agency participation and reuse of authorizations. Brian Conrad, FedRAMP's Acting Director, will highlight FedRAMP's growth and the program's FY21 focus on strategic initiatives - like automation and a threat based authorization approach - to transform FedRAMP, with a focus on continued partnerships with stakeholders.  Brian will also touch on the high level updates that were made to the draft Authorization Boundary Guidance which is currently open for public comment.

Session 2 - Lessons Learned on Cloud Security and Assessment
(9:30am - 10:30am)
This panel will include representatives from Amazon Web Services (AWS), Government Accountability Office (GAO), and TalaTek, which is a FedRAMP Third Party Assessment Organization (3PAO). Will be a Q&A panel format where we will discuss lessons learned from these three different perspectives on cloud security and compliance. Some of the topic that will be covered include what cloud providers and federal agencies are doing well with cloud compliance and future trends around cloud security and federal policy.
Speakers: 
Vijay D'Souza (United States Government Accountability Office)
Tyler Harding (Amazon Web Services Security Assurance)
Baan Alsinawi (TaleaTek)
Moderator: 
Phil Moore (Kearney & Company)

Session 3 - How NIST's Open Security Controls Assessment Language (OSCAL) Can Help Automate and Reduce Risk for FedRAMP Users
(10:30am - 11:30am)
NIST’S Open Security Controls Assessment Language, developed as a partnership between NIST, industry and FedRAMP, serves as a standardized language to represent control catalogs, control baselines, systems security plans (SSPs), assessment plans and results in both human- and machine-readable formats.  This session will dive into the language itself, showcasing how one can leverage this approach to automate resource-intensive tasks and deliver insightful information to auditors and decision makers in an agile manner.  Attendees will be able to ask questions during a Q&A following the presentation
Speaker:
Michaela Iorga (National Institute of Standards and Technology)
Moderator:
Chris Hughes (Cloud Security Alliance – Washington DC Metro Area)

Session 4 - NIST OSCAL in Action: Tools to Deliver Continuous Authorization to Operate (ATO) Documentation
(10:30am - 11:30am)
Public/private partnerships are crucial to advancing the state of the art and bringing innovation to life.  To that end, come learn how MITRE and a slew of innovative tools are putting NIST OSCAL to work, delivering great user experiences to accelerate and automate the ATO process, producing actionable documentation for both the auditor and the audited.  Attendees will be able to engage with presenters in the Chat throughout the session.
Speakers:
Aaron Lippold (MITRE)
Greg Elin (GovReady PBC)
Travis Howerton (C2 Labs)
Jasson Walker (cFocus Software)
Moderator:
Dr. Mari Spina (Cloud Security Alliance - Washington DC Metro Area)