BaselineWatch
Desk

AGU-AGC-NAA Notify FedRAMP After Authorization

FedRAMP Consolidated Rules (2026) 2026.09.13.02 against 2026.07.14.01
All changes in this version
modified AGU: Agency Use of FedRAMP Certified Cloud Services
Why it changed, in the publisher's words

2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.

https://github.com/FedRAMP/rules/commits/main/fedramp-consolidated-rules.json

Title

Notify FedRAMP After Authorization

Control

Agencies MUST notify FedRAMP upon authorizing the use of a cloud service within the scope of FedRAMP, supplying at least the following information:
- A copy of the agency's Authorization to Operate letter for the information system leveraging the cloud service, following agency policy and templates.
- All other supplemental information requested in the Submit an ATO Letter form by FedRAMP.