FedRAMP Subnet Whitepaper Rescinded (2025-08-08)
FedRAMP has formally rescinded its subnet whitepaper as of August 8, 2025. Organizations that previously relied on this whitepaper for guidance on subnet architecture or network segmentation within their FedRAMP authorization boundary should discontinue its use. Any internal policies, SSPs, or control implementations referencing this document may need to be reviewed and updated to remove or replace that reference.
What changed
- The FedRAMP subnet whitepaper has been officially rescinded and is no longer a valid or authoritative guidance document.
Who is affected
Cloud Service Providers (CSPs) pursuing or maintaining a FedRAMP authorization, and Third Party Assessment Organizations (3PAOs) that referenced the subnet whitepaper in assessments or documentation. US jurisdiction.
- Language
- EN