BaselineWatch
Desk

FRC-CCL-DNP Downgrade Notification Period

FedRAMP Consolidated Rules (2026) 2026.09.13.02 against 2026.07.14.01
All changes in this version
modified FRC: FedRAMP Certification
Why it changed, in the publisher's words

2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.

https://github.com/FedRAMP/rules/commits/main/fedramp-consolidated-rules.json

Title

Downgrade Notification Period

Control

Providers SHOULD notify all necessary parties at least 120 days in advance of an intended downgrade or cancellation of FedRAMP Certification.

Discussion

Downgrading or canceling FedRAMP Certification will have severe negative consequences for the provider and their agency customers and should only be done after careful consideration and planning... but if it must be done, notify all necessary parties as soon as possible.