BaselineWatch
Desk

SCN-TRF-NAV Notification After Verification

FedRAMP Consolidated Rules (2026) 2026.09.13.02 against 2026.07.14.01
All changes in this version
modified SCN: Significant Change Notification
Why it changed, in the publisher's words

2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.

https://github.com/FedRAMP/rules/commits/main/fedramp-consolidated-rules.json

Title

Notification After Verification

Control

Providers MUST notify all necessary parties within 5 business days after completing the verification, assessment, and/or validation of transformative changes, also including the following information:
- Updates to all previously sent information
- Summary of any new risks identified and/or vulnerabilities resulting from the change (if applicable)
- Copy of the security assessment report (if applicable)