FedRAMP

FedRAMP is the US federal program that standardizes security assessment and authorization for cloud services used by federal agencies. Its Rev. 5 authorizations use Low, Moderate, and High baselines drawn from NIST SP 800-53 Rev. 5, with ongoing continuous monitoring. FedRAMP is moving to the Consolidated Rules for 2026 and FedRAMP 20x, which define certification classes A through D. The rules take mandatory effect on January 1, 2027, and the Rev. 5 materials are now marked as legacy.