Published a public notice with the initial outcome of RFC-0022 Leveraging External Frameworks
FedRAMP published a public notice documenting the initial outcome of RFC-0022 regarding leveraging external frameworks. This guidance clarifies how external frameworks may be used within the FedRAMP authorization process, affecting how organizations approach compliance and assessment methodologies.
Who is affected
Cloud service providers (CSPs) and third-party assessors (3PAOs) undergoing or conducting FedRAMP authorizations
- Language
- EN