GovRAMP has opened a public comment period on RFC GR-2601, which proposes a delta assessment for cloud providers holding FedRAMP 20x certification. The proposal aims to allow these providers to reach GovRAMP Core, Ready, or Authorized status without a second full assessment. GovRAMP's analysis indicates that FedRAMP 20x covers 62.4% of the controls required for Authorized status. The comment period closes on 4 December 2026, and the proposal specifically addresses annual assessments while leaving continuous monitoring requirements unchanged.
Read the full story at trustlist.uk.
Photo: Tumisu / Pixabay
