thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Federal Risk and Authorization Management Program (FedRAMP)

U.S. government program that standardizes security assessment and authorization of cloud products used by federal agencies.

Definition

FedRAMP is based on NIST SP 800-53 controls with Low, Moderate and High impact baselines (plus LI-SaaS). Providers are assessed by accredited third-party assessment organizations and receive authorizations reused across agencies, with continuous monitoring requirements. The program is being modernized under the FedRAMP 20x initiative.

Example

A SaaS vendor achieves FedRAMP Moderate authorization so federal agencies can use it for controlled unclassified information.

Exam tip

FedRAMP applies to cloud services for U.S. federal agencies; GovCloud regions help providers meet High baseline requirements.

Related terms