FedRAMP Consolidated Rules for 2026
In effectGSA and FedRAMP · FedRAMP policy · June 25, 2026
Summary
Replaces FedRAMP's narrative guidance with plain-language rules for agencies, cloud providers, assessors, and advisors, opens 20x certification Classes A through C, and sets the timeline for retiring the older Rev5 process.
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- General Services Administration (GSA), including the Federal Risk and Authorization Management Program (FedRAMP)
- Type
- FedRAMP policy
- Issued
- June 25, 2026
- Status
- In effect
Still in force, possibly with amendments.
Optional adoption began July 4, 2026, and the rules become mandatory for all FedRAMP stakeholders on January 1, 2027.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.