FedRAMP

Federal Risk and Authorization Management Program, the US standard for cloud service offerings used by federal agencies. Drives the FedRAMP authorization baselines (Low, Moderate, High, and the emerging Li-SaaS) once an agency sponsor signs on. Attention is triggered by a Continuously Monitoring (ConMon) finding that flips a "Significant Change" condition, by an overdue annual assessment, by a Plan of Action & Milestone on an inherited baseline control, and by a 3PAO finding that pushes the agency sponsor toward a Revocation.

/fedramp