BaselineWatch
Desk

REC-IAS-SEP Advisory Separation

FedRAMP Consolidated Rules (2026) 2026.10.08.01 against 2026.10.05.01
All changes in this version
unchanged REC: FedRAMP Recognition of Independent Assessment Services

Title

Advisory Separation

Control

Assessors MUST NOT perform a FedRAMP independent assessment of the same cloud service offering within 2 years after supplying advisory or consulting services for that offering, unless FedRAMP publishes a specific exception for a limited pilot or other explicitly scoped process.

Discussion

Corrective action: FedRAMP may require a consultation meeting, corrective action plan, or revocation for failure to comply.