Severity: Medium Amendment US Action required

FedRAMP updates 20x content with expanded phase two details and official documentation page

Original title: Significant updates to FedRAMP 20x content, including more detailed phase two information and the addition of an official documentation page

Published
Source: fedramp.gov
Effective
Not stated
Deadline
Not stated
Framework: FedRAMP
CR26 source
in 53 days
CR26 becomes mandatory: new Rev5 applications and all active 20x certifications must follow it source

Why it matters

FedRAMP has published significant updates to its 20x content, including more comprehensive phase two information and the launch of an official documentation page. These updates aim to provide cloud service providers and federal agencies with clearer guidance on the authorization pathway and requirements. The expanded documentation improves transparency and accessibility of FedRAMP's assessment and authorization processes.

What changed

  • FedRAMP 20x content has been substantially updated with more detailed phase two information, providing enhanced guidance on the authorization process and requirements for this pathway
  • An official documentation page has been added to FedRAMP's resources, consolidating and organizing documentation for easier access by cloud service providers and federal agencies

Who is affected

Cloud service providers (CSPs) and federal agencies participating in or considering FedRAMP authorization, particularly those pursuing the 20x pathway

What to do

AI-assisted summary of the official document; the official text prevails. Not legal advice.