FRC-CLA-EAM External Assessment Materials
FedRAMP Consolidated Rules (2026) 2026.09.13.02 against 2026.07.14.01
All changes in this version
All changes in this version
Why it changed, in the publisher's words
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
https://github.com/FedRAMP/rules/commits/main/fedramp-consolidated-rules.jsonTitle
External Assessment Materials
Control
Providers seeking a FedRAMP Class A Certification MUST supply the following materials from their alternative security framework assessment to all necessary parties:
- SOC 2 Type II: Complete report, bridge or gap letter (if applicable), verified audit engagement documentation, estimated schedule for upcoming report, supplemental compliance evidence (if applicable)
- FedRAMP Ready: Readiness Assessment Report, Security Assessment Plan, and any other materials required by FedRAMP.
- GovRAMP: Readiness Assessment Report, Security Assessment Plan, and any other materials required by GovRAMP.