FedRAMP Stakeholders
FedRAMP’s stakeholders include both industry and federal agencies, and both play an important role in modernizing service delivery for the public.
Federal Agencies
- Partner with cloud service providers to achieve FedRAMP authorization
- Use 3PAO assessments as the basis for making informed, risk-based authorization decisions for the use of cloud products and services
- Provide ATOs to FedRAMP
- Leverage the FedRAMP Marketplace to research cloud offerings that are FedRAMP Authorized or are In Process
- Reuse security packages from existing FedRAMP Authorized cloud providers to inform an ATO decision
- Integrate the FedRAMP requirements into agency specific policies and procedures and partner with FedRAMP to modernize
Resources
The resources below provide additional guidance on the FedRAMP Rev 5 Agency Authorization path. Technical guidance as well as FedRAMP templates are located on the Documents & Templates page.
Agency Authorization Playbook
Compilation of best practices, tips, and step-by-step guidance for agencies seeking to undergo the FedRAMP Rev 5 Agency Authorization process.
Package Access Request Form
Form that must be completed to gain access to a FedRAMP Authorized package.
Reusing Authorizations for Cloud Products Quick Guide
Quick guide that outlines steps and guidance to help agencies quickly and efficiently reuse authorized cloud offerings within the FedRAMP Marketplace.
ATO Letter Template
Optional template for agencies to use when granting authorizations for CSOs.
