Is a Federal Information Security Modernization Act (FISMA) Authority To Operate (ATO) sufficient to meet FedRAMP requirements?

No. The FedRAMP process builds on FISMA and the National Institute of Standards and Technology (NIST) baseline controls by removing requirements that are not applicable to commercial entities and replacing those with controls more appropriate for ensuring security related to protecting information maintained on behalf of the federal government.