Severity: Low New document US
FedRAMP publishes NOTICE-0010 responding to CISA V1: ED 25-03
Original title: Added NOTICE-0010 regarding FedRAMP Response to CISA V1: ED 25-03
- Published
- Source: fedramp.gov
- Effective
- Not stated
- Deadline
- Not stated
- Framework: CISA
- BOD 26-04: Prioritizing Security Updates Based on Risk source
- in 9 days
- CISA Logging Reference Architecture: outcome-driven guidance for FCEB agencies to build Agency Logging Plans under OMB M-26-14
- Also: FedRAMP
Why it matters
FedRAMP has published NOTICE-0010 as an official response to CISA V1: ED 25-03. This notice provides FedRAMP's position and guidance on how the CISA directive applies to the FedRAMP authorization process and cloud service providers operating under the FedRAMP framework. Organizations must review this notice to understand FedRAMP's implementation approach for CISA requirements.
What changed
- FedRAMP published NOTICE-0010 on April 23, 2026, providing official guidance on FedRAMP's response to CISA V1: ED 25-03 directive
Who is affected
Cloud service providers operating under FedRAMP authorization, federal agencies authorizing and using FedRAMP-certified cloud services, and organizations subject to CISA requirements.
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.