public:99_annexes:annex-b-terms-and-definitions:f:fedramp

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
public:99_annexes:annex-b-terms-and-definitions:f:fedramp [2026/09/12 17:42] – removed - external edit (Unknown date) 127.0.0.1public:99_annexes:annex-b-terms-and-definitions:f:fedramp [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
Line 1: Line 1:
 +====== Federal Risk and Authorization Management Program (FedRAMP) ======
  
 +[[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]
 +
 +===== Discussion =====
 +
 +The Federal Risk and Authorization Management Program (FedRAMP) establishes a government-wide approach for evaluating cloud computing products and services used by United States federal agencies.
 +
 +FedRAMP provides common security assessment rules, documentation expectations, evidence, and authorization-related information that federal agencies can use when making risk-based decisions about cloud services.
 +
 +FedRAMP applies to cloud computing products and services within its defined scope. FedRAMP does not replace an agency's responsibility to make its own authorization and risk-management decisions.
 +
 +Within Crucible documentation, FedRAMP provides a source for:
 +
 +  * [[public:99_annexes:annex-b-terms-and-definitions:c:compliance_baseline|Compliance Baselines]]
 +  * Security controls
 +  * Assessment criteria
 +  * Security-control implementation information
 +  * Compliance findings
 +  * Compliance [[public:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]
 +  * Authorization-supporting information
 +
 +===== Definition =====
 +
 +//A United States government-wide program that provides a standardized approach to the security assessment and authorization of cloud computing products and services used by federal agencies.//
 +
 +===== Source =====
 +
 +Federal Risk and Authorization Management Program, FedRAMP.gov.
 +
 +United States federal law and government-wide guidance governing the Federal Risk and Authorization Management Program.
 +
 +===== Note =====
 +
 +The acronym **FedRAMP** means **Federal Risk and Authorization Management Program**.
 +
 +FedRAMP supplies assessment and authorization information that federal agencies use when making authorization decisions. FedRAMP does not itself issue a government-wide [[private:99_annexes:annex-b-terms-and-definitions:a:authorization_to_operate|Authorization to Operate (ATO)]] for every agency use of a cloud service.
 +
 +A FedRAMP [[public:99_annexes:annex-b-terms-and-definitions:c:compliance_baseline|Compliance Baseline]] represents compliance criteria derived from an identified FedRAMP baseline or assessment framework.
 +
 +===== Example =====
 +
 +Crucible defines a FedRAMP Compliance Baseline that identifies security controls, assessment criteria, required implementation information, and supporting Evidence for a cloud service deployment.
 +
 +----
 +
 +<WRAP centeralign>
 +© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
 +</WRAP>