FedRAMP's call to the FSCAC: help cloud providers agree on one approach before they come to the government

▶ Play the video: The FedRAMP Call-to-Action to FSCAC

On June 10, 2026, the Federal Risk and Authorization Management Program (FedRAMP) posted a short video, "The FedRAMP Call-to-Action to FSCAC." The Federal Secure Cloud Advisory Committee (FSCAC) is the advisory committee that the FedRAMP Authorization Act created in 44 U.S.C. 3616. It advises the Administrator of the General Services Administration (GSA), the FedRAMP Board, and agencies. Its recommendations are advice; they are not FedRAMP rules.

In short:

• What FedRAMP said. A FedRAMP speaker said many companies ask FedRAMP to set different standards for the same thing. The speaker hopes the FSCAC will, over the next year, help industry agree on one approach and bring it to the government.
• Who it affects. Cloud service providers that hold or seek a FedRAMP Certification, and the agencies that adopt and reuse their services.
• What it means. FedRAMP is asking industry to settle differences among themselves first, through the committee, whose meetings are public, rather than asking FedRAMP to choose among many proposals.
• What comes next. FedRAMP says it will use the committee for the rest of 2026 to work on agency adoption and reuse, and the committee's chair proposed that focus at the June 8 meeting. A Federal Register notice set its 2026 meetings for June 8, July 27, August 31, and November 2.

What is FedRAMP asking the committee to do?

In the video, a FedRAMP speaker said the request heard most often from outside is some form of "help us create standardized interactions" and help sharing information well. The speaker said many companies may each ask FedRAMP to set different things for the same thing, and that FedRAMP should not have to be in the middle of that.

The speaker said that when many cloud service providers agree on how they will make information available, the committee can bring that to agencies and FedRAMP, and FedRAMP can standardize on it. The speaker said FedRAMP hopes the committee can coordinate and encourage a framework where private industry aligns and comes to the government "as one body."

The video's description adds that, in 2026, the GSA Administrator's representative wants "something more tangible" from the committee than past oral discussion: a roadmap for how agencies can increase the adoption and reuse of FedRAMP Certified cloud services.

What will the committee work on in 2026?

FedRAMP's May 28, 2026, announcement said that for the rest of 2026, FedRAMP will use the FSCAC as a forum to find practical ways to improve how agencies adopt and reuse FedRAMP cloud security packages.

At the June 8, 2026, meeting, the committee's minutes record that the chair proposed focusing 2026 work mainly on agency adoption and reuse. Members named barriers, including confusion about what certification means, Inspector General and audit pressure, older governance tools and manual processes, and unclear acquisition language. Ideas for outputs included a reuse best practices guide, frequently asked questions for each audience, acquisition guidance, and recommendations on tools and automation. The minutes record no votes at that meeting.

Does the FSCAC set FedRAMP policy?

No. Under 44 U.S.C. 3616, the committee examines FedRAMP's operations and gives advice, including on ways to increase agency reuse and reduce cost and burden for providers and agencies. It has up to 15 members from government and industry and meets at least three times a year. The law gives it an advisory role; its recommendations do not change FedRAMP's rules by themselves.

Sources

• FedXchange tracker: The FedRAMP Call-to-Action to FSCAC (June 10, 2026)
• YouTube: The FedRAMP Call-to-Action to FSCAC
• 44 U.S.C. 3616: Federal Secure Cloud Advisory Committee
• FedRAMP Authorization Act (Public Law 117-263, section 5921)
• FedRAMP: Continuing our commitment to public engagement (May 28, 2026)
• GSA: FSCAC June 8, 2026, public meeting agenda and minutes
• FedXchange tracker: FSCAC Meeting, June 8, 2026
• Federal Register: FSCAC notification of upcoming meetings for 2026
• GSA: Federal Secure Cloud Advisory Committee