FRC-CLA-ASF Approved Alternative Security Frameworks
FedRAMP Consolidated Rules (2026) 2026.09.13.02 against 2026.07.14.01
All changes in this version
All changes in this version
Why it changed, in the publisher's words
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
https://github.com/FedRAMP/rules/commits/main/fedramp-consolidated-rules.jsonTitle
Approved Alternative Security Frameworks
Control
Providers seeking a FedRAMP Class A Certification MUST have completed a certification or equivalent process, including an independent assessment if applicable, from one of the following alternative security frameworks within the past 12 months:
- FedRAMP Rev5 (including FedRAMP Ready) at any historical Impact Level
- SOC 2 Type II
- GovRAMP at any Impact Level