+FRC FedRAMP Certification
---+FRC-CSO General Provider Responsibilities
------+FRC-CSO-FCP FedRAMP Certification Profile
------+FRC-CSO-PKG FedRAMP Certification Package
------+FRC-CSO-JSN FedRAMP JSON Schemas
------+FRC-CSO-MRA Maintain Responsibility and Accountability
------+FRC-CSO-POP Pick One Program Certification Type
---+FRC-CLA FedRAMP Class A Certification Rules
------+FRC-CLA-ASF Approved Alternative Security Frameworks
------+FRC-CLA-EAM External Assessment Materials
------+FRC-CLA-MFR Mandatory FedRAMP Rules for Class A
------+FRC-CLA-RFR Recommended FedRAMP Rules for Class A
------+FRC-CLA-OFR Address Optional FedRAMP Rules for Class A
------+FRC-CLA-IVV Optional Independent Verification and Validation
---+FRC-APP Applying for FedRAMP Certification
------+FRC-APP-MLF Marketplace Listing First
------+FRC-APP-AFC Applying for FedRAMP Certification
------+FRC-APP-FCP Fresh FedRAMP Certification Package
------+FRC-APP-FIA Fresh Independent Assessment
------+FRC-APP-NTP No Third-Party Applicants
------+FRC-APP-USA Updating Stale Assessments
---+FRC-APS Applying for FedRAMP Certification with an Agency Sponsor
------+FRC-APS-ATO Agency Authorization to Operate
---+FRC-CCL Changing Certification Class
------+FRC-CCL-UCC Upgrading Certification Class
------+FRC-CCL-DCC Downgrading Certification Class
------+FRC-CCL-DNP Downgrade Notification Period
---+FRC-CSX 20x-Specific Provider Responsibilities
------+FRC-CSX-VVK Automated Verification and Validation of Key Security Indicators
------+FRC-CSX-VVR Automated Verification and Validation of FedRAMP Rules
------+FRC-CSX-MAS Application within MAS
---+FRC-CSF Rev5-Specific Provider Responsibilities
------+FRC-CSF-BSL FedRAMP Rev5 Baselines
---------+FRC-CSF-BSL FedRAMP Rev5 Baselines – Class B
---------+FRC-CSF-BSL FedRAMP Rev5 Baselines – Class C
---------+FRC-CSF-BSL FedRAMP Rev5 Baselines – Class D
------+FRC-CSF-ACP Assign Control Parameters
------+FRC-CSF-FFG Follow FedRAMP Rev5 Controls Guidance
------+FRC-CSF-RDY FedRAMP Ready Conversion

FRC FedRAMP Certification

This ruleset explains how cloud service offerings obtain and maintain FedRAMP Certification across certification classes and paths.

Effective for 20x

Status: required
Current status: Consolidated Rules for 2026
Optional adoption from: 2026-07-04
Required for initial certification from: 2026-07-04
Required for ongoing certification from: 2027-01-01
Grace period ends: 2027-01-01 or at the next assessment

Effective for Rev5

Status: required
Current status: Consolidated Rules for 2026
Optional adoption from: 2026-07-04
Required for initial certification from: 2027-01-01
Required for ongoing certification from: 2027-01-01
Grace period ends: 2027-01-01 or at the next assessment

1. Apžvalga

Pavadinimas	Standartas
FRC-CSO General Provider Responsibilities	These rules apply to cloud service providers obtaining and maintaining any FedRAMP Certification. Types: 20x, Rev5 Paths: Program, Agency Classes: A, B, C, D Affects: Providers
FRC-CLA FedRAMP Class A Certification Rules	These are specific rules that apply to providers seeking FedRAMP Class A Certifications. Types: 20x Paths: Program Classes: A Affects: Providers
FRC-APP Applying for FedRAMP Certification	These rules apply to cloud service providers who have met all other relevant rules and are ready to apply for any FedRAMP Certification. Types: 20x, Rev5 Paths: Program, Agency Classes: A, B, C, D Affects: Providers
FRC-APS Applying for FedRAMP Certification with an Agency Sponsor	These rules apply to cloud service providers with an Agency Sponsor who have met all other relevant rules and are ready to apply for any FedRAMP Certification. Types: Rev5 Paths: Agency Classes: B, C, D Affects: Providers
FRC-CCL Changing Certification Class	These rules apply to cloud service providers when changing their FedRAMP Certification Class. Types: Rev5 Paths: Agency Classes: B, C, D Affects: Providers
FRC-CSX 20x-Specific Provider Responsibilities	These rules apply to providers for FedRAMP 20x Certifications. Types: 20x Paths: Program Classes: B, C, D Affects: Providers
FRC-CSF Rev5-Specific Provider Responsibilities	These rules apply to providers for FedRAMP Rev5 Certifications. Types: Rev5 Paths: Program, Agency Classes: B, C, D Affects: Providers

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai
Šaltinis	Reikalavimas

3. Susiję teisės aktai

Teisės aktai
Šaltinis	Reguliavimas

FedRAMP Consolidated Rules -
EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.

DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.