SCN-TRF-NIP Notification of Initial Plans
FedRAMP Consolidated Rules (2026) 2026.09.13.02 against 2026.07.14.01
All changes in this version
All changes in this version
Why it changed, in the publisher's words
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
https://github.com/FedRAMP/rules/commits/main/fedramp-consolidated-rules.jsonTitle
Notification of Initial Plans
Control
Providers MUST notify all necessary parties of initial plans for transformative changes at least 30 business days before starting transformative changes, including a summary of any likely security impacts or changes in risk.