U.S. government initiative to vet cloud providers known as FedRAMP is a problem facing many enterprises in and out of government. “If you do not know what IT systems, products and services you have, you don’t know what you need to defend or how to defend it,” says David McClure. McClure says it’s critical to identify users, administrators and organizations – as well as services, applications, interfaces and networks – that have access to data and systems in order to understand security weaknesses and vulnerabilities.”]
Source: https://www.careersinfosecurity.com/tracking-cloud-services-essential-security-step-a-8784