2026/reference/fedramp-certification/

[giscus[bot]]

2026/reference/fedramp-certification/

This site contains FedRAMP's Consolidated Rules for 2026.

https://www.fedramp.gov/2026/reference/fedramp-certification/?h=FRC-CLA-RFR

[tnnrjmsn-eit]

Over on the CPO-CSF-CPM Changelog (from 2026-07-14), it states "Removed reference to class A. All class A certifications are 20x."
However, CPO-CSF-CPM is still listed here as a recommended Class A Practice (under FRC-CLA-RFR).

If a provider takes this page alone as Class A guidance, they may mistakenly think that Rev5 offers the option for Class A.

[pete-gov]

Thank you, I have created Rules #44 to track fixing this.

[StevenCh99]

For FRC-CCL-DCC
is: "please DO NOT downgrade Certification Class with providing advance notification to all necessary parties!"
supposed to be: "please DO NOT downgrade Certification Class without providing advance notification to all necessary parties!"

[pete-gov]

Errr... yes. Heh. Thank you! I've created Rules/#50 to track fixing this issue.

[JoshuaDaudt]

For existing Rev5 FedRAMP-authorized providers transitioning to Rev5 Class D Certification under CR26:

Does the “Applying for FedRAMP Certification” subset apply, or only when applying for a new FedRAMP Certification? For example: FRC-APP-AFC, FRC-APP-FCP, and FRC-APP-FIA.

If the provider already has an Agency Sponsor and an existing agency ATO, does the “Applying for FedRAMP Certification with an Agency Sponsor” subset apply as part of the CR26 transition?

[pete-gov]

For existing Rev5 FedRAMP-authorized providers transitioning to Rev5 Class D Certification under CR26:

If you are staying at the same FedRAMP Certification Class then adopting CR26 rules is considered normal operational maintenance required to maintain your current FedRAMP Certification. You do not need to apply for a new FedRAMP Certification and the maintain dates for CR26 apply.

If you want to upgrade your FedRAMP Certification Class then that is not maintaining your FedRAMP Certification, that is obtaining a new FedRAMP Certification and FRC-CCL-UCC (Upgrading Certification Class) applies... and the obtain dates for CR26 apply.

Happy to provide more details if you clarify which scenario you're looking at!