Software Securityhome
Fix a findingSearch
Glossary

FedRAMP

Federal Risk and Authorization Management Program

The US government program for assessing and authorizing the cloud services that federal agencies use, based on NIST SP 800-53 controls. Its FedRAMP 20x process is replacing document-heavy reviews with automated, evidence-based validation.

Defined in
FedRAMP

Covered in

Guide

ISO 27001, SOC 2, NIST CSF or FedRAMP: choose the framework by the question it answers

Distinguish management systems, technical controls, risk outcomes, independent reports and government cloud requirements before reusing evidence.

Find your next answer

Type to search. Search runs in your browser.

Searches run in your browser, but the host can infer them from the index files they load. The address shows your search so you can bookmark or share it.