FedRAMP is the Federal Risk and Authorization Management Program (FedRAMP). This program is an innovative policy approach to developing trusted relationships between Federal agencies and cloud service providers. The goal of the program is to reduce duplicative efforts, inconsistencies and cost inefficiencies associated with the current security authorization process. FedRAMP establishes a public-private partnership to promote innovation and the advancement of more secure information technologies.
By using an agile and flexible framework, FedRAMP is enabling the Federal Government to accelerate the adoption of cloud computing by creating transparent standards and processes for security authorizations and allowing agencies to leverage security authorizations on a government-wide scale. The program is designed to comply with the Federal Information Security Management Act of 2002 (FISMA).
FedRAMP is the result of a close collaboration with cybersecurity and cloud experts from GSA, NIST, DHS, DOD, NSA, OMB, the Federal CIO Council and its working groups, as well as private industry.
Guide to Understanding FedRAMP (June 6, 2014)
FedRAMP Concept of Operations (July 27, 2012)
Memo to CIOs:Security Authorization of Information Systems in Cloud Computing Environments (December 8, 2011)
For questions regarding FedRAMP, please direct inquiries to questions@FedRAMP.gov.