BaselineWatch
Desk

FRD-MNT MUST NOT

FedRAMP Consolidated Rules (2026) 2026.09.13.02 against 2026.07.14.01
All changes in this version
added FRD: Definitions
Why it changed, in the publisher's words

2026-09-13: Added force to FedRAMP Definitions for clarity.

https://github.com/FedRAMP/rules/commits/main/fedramp-consolidated-rules.json

Title changed

Before · 2026.07.14.01

After · 2026.09.13.02

MUST NOT

Control changed

Before · 2026.07.14.01

After · 2026.09.13.02

The rule is an absolute prohibition. Parties MUST meet such rules and address them in their security documentation. Failure to follow the rule is a vulnerability likely requiring corrective action and/or the denial of initial or ongoing FedRAMP Certification.