AFC-FRP-ERT Elevated Reaction Timeframes
All changes in this version
Title
Elevated Reaction Timeframes
Control
FedRAMP MUST clearly specify the expected timeframe for completing required actions in the body of messages that require an elevated reaction; timeframes for actions will vary depending on the situation but the default timeframes to provide an estimated resolution time for Emergency and Emergency Test designated messages will be as follows:
- **Class D:** within 12 hours
- **Class C:** by 3:00 p.m. Eastern Time on the 2nd business day
- **Class B:** by 3:00 p.m. Eastern Time on the 3rd business day
- **Class A:** by 3:00 p.m. Eastern Time on the 5th business day
Discussion
FedRAMP Class D Certified cloud service providers are expected to address Emergency messages (including tests) from FedRAMP with a reaction time appropriate to operating a service where failure to react rapidly might have a severe or debilitating customer effect on the U.S. Government; some Emergency messages may require faster reaction and all such messages should be addressed as quickly as possible.