FedRAMP rescinds subnet whitepaper

Original title: FedRAMP Subnet Whitepaper Rescinded (2025-08-08)

FedRAMP has formally rescinded its subnet whitepaper, removing it from the body of authoritative guidance. Cloud service providers and assessors that previously relied on this whitepaper for subnet-related implementation or assessment decisions should no longer treat it as applicable guidance and should verify whether alternative documentation has been issued to replace it.

What changed

• The FedRAMP subnet whitepaper has been rescinded and is no longer in effect as authoritative guidance.

Who is affected

Cloud service providers (CSPs) pursuing or maintaining FedRAMP authorization, third-party assessment organizations (3PAOs), and agency authorizing officials operating under US federal jurisdiction who referenced the subnet whitepaper for implementation or assessment purposes.