FedRAMP 20x
In effectGSA and FedRAMP · FedRAMP policy · March 24, 2025
Summary
Started a new, automation-focused FedRAMP authorization approach, built in public with industry, that relies on continuous, machine-readable evidence of security outcomes instead of narrative documentation.
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- General Services Administration (GSA), including the Federal Risk and Authorization Management Program (FedRAMP)
- Type
- FedRAMP policy
- Issued
- March 24, 2025
- Status
- In effect
Still in force, possibly with amendments.
Pilot phases ran from April 2025 to March 2026, and the Consolidated Rules for 2026 opened 20x certification to all providers in Classes A, B, and C.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.