There are three listing designations available on the FedRAMP Marketplace: FedRAMP Ready, In Process, or Authorized.
- FedRAMP Ready indicates that a third party assessment organization (3PAO) attests to a CSP’s readiness for the authorization process, and that a FedRAMP Readiness Assessment Report (RAR) has been reviewed and approved by the FedRAMP Program Management Office (PMO). The RAR documents the CSP’s capability to meet FedRAMP security requirements.
- FedRAMP In Process is a designation provided to CSPs that are actively working toward a FedRAMP authorization with either the Joint Authorization Board (JAB) or a federal agency.
- The FedRAMP Authorized designation is provided to CSPs that have successfully completed the FedRAMP authorization process with the JAB or a federal agency. This designation indicates the CSPs security package is available for agency review and reuse. Private cloud offerings are not listed on the FedRAMP Marketplace as they do not meet the intent of “do once, use many times” and thus the security packages are not considered reusable.
More detail about these designations and how to be listed on the Marketplace can be found on the About FedRAMP Marketplace page.
Comments
0 comments
Please sign in to leave a comment.