REC-IAS-SEP Advisory Separation
FedRAMP Consolidated Rules (2026) 2026.10.08.01 against 2026.10.05.01
All changes in this version
All changes in this version
Title
Advisory Separation
Control
Assessors MUST NOT perform a FedRAMP independent assessment of the same cloud service offering within 2 years after supplying advisory or consulting services for that offering, unless FedRAMP publishes a specific exception for a limited pilot or other explicitly scoped process.
Discussion
Corrective action: FedRAMP may require a consultation meeting, corrective action plan, or revocation for failure to comply.