Severity: High Withdrawal US Action required
FedRAMP rescinds subnet whitepaper
Original title: FedRAMP Subnet Whitepaper Rescinded (2025-08-08)
- Published
- Source: fedramp.gov
- Effective
- Not stated
- Deadline
- Not stated
Why it matters
FedRAMP has formally rescinded its subnet whitepaper, removing it from the body of authoritative guidance. Cloud service providers and assessors that previously relied on this whitepaper for subnet-related implementation or assessment decisions should no longer treat it as applicable guidance and should verify whether alternative documentation has been issued to replace it.
What changed
- The FedRAMP subnet whitepaper has been rescinded and is no longer in effect as authoritative guidance.
Who is affected
Cloud service providers (CSPs) pursuing or maintaining FedRAMP authorization, third-party assessment organizations (3PAOs), and agency authorizing officials operating under US federal jurisdiction who referenced the subnet whitepaper for implementation or assessment purposes.
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.