BaselineWatch
Desk

AFC-FRP-ERT Elevated Reaction Timeframes

FedRAMP Consolidated Rules (2026) 2026.10.05.01 against 2026.09.13.02
All changes in this version
unchanged AFC: Addressing FedRAMP Communication

Title

Elevated Reaction Timeframes

Control

FedRAMP MUST clearly specify the expected timeframe for completing required actions in the body of messages that require an elevated reaction; timeframes for actions will vary depending on the situation but the default timeframes to provide an estimated resolution time for Emergency and Emergency Test designated messages will be as follows:
- **Class D:** within 12 hours
- **Class C:** by 3:00 p.m. Eastern Time on the 2nd business day
- **Class B:** by 3:00 p.m. Eastern Time on the 3rd business day
- **Class A:** by 3:00 p.m. Eastern Time on the 5th business day

Discussion

FedRAMP Class D Certified cloud service providers are expected to address Emergency messages (including tests) from FedRAMP with a reaction time appropriate to operating a service where failure to react rapidly might have a severe or debilitating customer effect on the U.S. Government; some Emergency messages may require faster reaction and all such messages should be addressed as quickly as possible.