SCN-TRF-NAV Notification After Verification
FedRAMP Consolidated Rules (2026) 2026.09.13.02 against 2026.07.14.01
All changes in this version
All changes in this version
Why it changed, in the publisher's words
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
https://github.com/FedRAMP/rules/commits/main/fedramp-consolidated-rules.jsonTitle
Notification After Verification
Control
Providers MUST notify all necessary parties within 5 business days after completing the verification, assessment, and/or validation of transformative changes, also including the following information:
- Updates to all previously sent information
- Summary of any new risks identified and/or vulnerabilities resulting from the change (if applicable)
- Copy of the security assessment report (if applicable)