Severity: Medium Amendment US Action required
FedRAMP replaces 'Authorization' terminology with 'Certification' and introduces classes A, B, C, D
Original title: FedRAMP terminology update: 'Authorization' renamed to 'Certification', impact levels replaced with certification classes A–D
- Published
- Source: fedramp.gov
- Effective
- Not stated
- Deadline
- Not stated
Why it matters
FedRAMP has renamed all 'FedRAMP Authorization' designations to 'FedRAMP Certification' and replaced impact level designations with a new classification system using classes A, B, C, and D. This terminology update affects how organizations refer to their FedRAMP compliance status and how risk levels are communicated. Cloud service providers and federal agencies must update their documentation, communications, and compliance references to align with the new designations.
What changed
- 'FedRAMP Authorization' designation changed to 'FedRAMP Certification' across all references and documentation
- Impact level designations replaced with certification classes: A, B, C, and D
Who is affected
Cloud service providers (CSPs) seeking or holding FedRAMP compliance; federal agencies evaluating or using FedRAMP-certified cloud services; US government sector
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.