FedRAMP replaces 'Authorization' terminology with 'Certification' and introduces classes A, B, C, D

Original title: FedRAMP terminology update: 'Authorization' renamed to 'Certification', impact levels replaced with certification classes A–D

FedRAMP has renamed all 'FedRAMP Authorization' designations to 'FedRAMP Certification' and replaced impact level designations with a new classification system using classes A, B, C, and D. This terminology update affects how organizations refer to their FedRAMP compliance status and how risk levels are communicated. Cloud service providers and federal agencies must update their documentation, communications, and compliance references to align with the new designations.

What changed

• 'FedRAMP Authorization' designation changed to 'FedRAMP Certification' across all references and documentation
• Impact level designations replaced with certification classes: A, B, C, and D

Who is affected

Cloud service providers (CSPs) seeking or holding FedRAMP compliance; federal agencies evaluating or using FedRAMP-certified cloud services; US government sector