Frequently Asked Questions (FAQ) Coming Soon

FedRAMP

• Consolidated Rules of 2026 (CR26) FAQs Coming Soon

Cloud Service Providers

• Can I get a Class A 20x Certification, then go to Class B Rev 5 Certification?
• Can cloud service providers use non-FedRAMP services within their certified cloud service offering?
• What comes after a CSP achieves a FedRAMP Marketplace Listing for the “Initial Implementation status”?
• What is a "FedRAMP Compatible Trust Center"?

Independent Assessors

• Where can I find the FedRAMP Rev5 control baselines for Class B, C, and D?

Getting FedRAMP Certified

• Why was my Marketplace Listing submission rejected, and what do I need to do before resubmitting?
• What happens if a cloud service provider’s Marketplace status was incorrectly converted?
• What frameworks can be used to obtain a Class A Certification?

Rev5

• What happens if a cloud service offering (CSO) loses its agency customers?
• Are cloud service providers allowed to change parameter definitions at any time?
• How should cloud service providers transition from the traditional POA&M process to the new VDR/VER process?
• Q: Will FedRAMP provide guidance on the sunsetting of FIPS 140-2? What do I do if our planned 140-3 Module is not yet approved.