FedRAMP certification clarifies third-party risk requirements

cloud security server Photo: AbsolutVision / Pixabay

The FedRAMP Authorization Act establishes a statutory framework for assessing cloud security for federal agencies. As of October 31, 2026, the program uses the term FedRAMP Certification to describe a package of security materials. This certification creates a presumption of adequacy for agency authorization decisions but does not grant an authorization to operate. Agencies must still issue their own authorizations and verify that the certification is currently maintained through ongoing monitoring.

Read the full story at rescana.com.

Photo: AbsolutVision / Pixabay