Sign in

Low New document US

FedRAMP publishes NOTICE-0009 on machine-readable packages and cybersecurity service

Original title: Added NOTICE-0009 with the initial outcome of RFC-0024 FedRAMP Rev5 Machine-Readable Packages and added information on the FedRAMP Cybersecurity Service

Published
Source: fedramp.gov
Effective
Not stated
Deadline
Not stated
Framework: FedRAMP
CR26 source
in 53 days
CR26 becomes mandatory: new Rev5 applications and all active 20x certifications must follow it source

Why it matters

FedRAMP has published NOTICE-0009 detailing the initial outcome of RFC-0024 concerning FedRAMP Rev5 machine-readable packages, and released information about the FedRAMP Cybersecurity Service. This notice provides guidance on the implementation of machine-readable security package formats under FedRAMP Rev5. The announcement informs CSPs and agencies about new tooling and service offerings for FedRAMP authorization and compliance.

What changed

  • FedRAMP publishes NOTICE-0009 with the initial outcome of RFC-0024 regarding FedRAMP Rev5 machine-readable packages
  • FedRAMP Cybersecurity Service information made available to support authorization and compliance efforts

Who is affected

Cloud Service Providers (CSPs) seeking FedRAMP authorization and federal agencies utilizing cloud services under FedRAMP

What to do

Open the official document

AI-assisted summary of the official document; the official text prevails. Not legal advice.

More changes in FedRAMP