FedRAMP Recognition of Independent Assessment Services¶
The FedRAMP Recognition of Independent Assessment Services rules explain the requirements for assessors to obtain and maintain FedRAMP Recognition in order to support the FedRAMP Certification process.
FedRAMP Responsibilities¶
These rules apply to FedRAMP when evaluating independent assessment services for initial or ongoing FedRAMP Recognition.
Recognized Assessors Only¶
REC-FRP-RAO
Changelog:
- 2026-05-04: Initial reset for the Consolidated Rules for 2026 Public Preview.
FedRAMP MUST NOT accept verification, validation, or other attestations from independent assessors who are not FedRAMP Recognized.
Terms: FedRAMP Recognized, Validation, Verification
Foreign Ownership Collection¶
REC-FRP-FOC
Changelog:
- 2026-05-04: Initial reset for the Consolidated Rules for 2026 Public Preview.
FedRAMP MUST maintain a process to collect foreign ownership, control, or influence declarations from FedRAMP Recognized assessors and updates to those declarations.
Terms: FedRAMP Recognized
Double Revocation Disqualification¶
REC-FRP-DRD
Changelog:
- 2026-05-04: Initial reset for the Consolidated Rules for 2026 Public Preview.
FedRAMP MUST NOT restore FedRAMP Recognition for an assessor after FedRAMP has revoked that assessor's FedRAMP Recognition 2 times.
Terms: FedRAMP Recognized