Skip to content

Reality2byte/docs3

 
 

FedRAMP 20x Machine Readable (FRMR) Docs

This repository contains FedRAMP 20x standards, technical assistance, and other materials in both machine-readable and human-readable formats.

FRMR Identifiers

See IDENTIFIERS.md for explanations about the naming and structure of these materials.

FRMR Materials

Markdown PDF Description Version Published Date
Authorization Data Sharing Standard (ADS) [PDF] Minor updates to improve clarity; switch from federal information to federal customer data; add impact level metadata; no substantive changes. 25.10A 2025-10-17
Significant Change Notification Requirements (SCN) [PDF] minor updates to improve clarity; switch from federal information to federal customer data; add impact level metadata; no substantive changes. 25.10A 2025-10-17
FedRAMP Definitions (FRD) [PDF] Minor updates to improve clarity; switch from federal information to federal customer data; no substantive changes. 25.10A 2025-10-17
Minimum Assessment Standard (MAS) [PDF] minor updates to improve clarity; switch from federal information to federal customer data; add impact level metadata; no substantive changes. 25.10A 2025-10-17
Vulnerability Detection and Response Standard (VDR) [PDF] Minor updates to improve clarity; switch from federal information to federal customer data; add impact level metadata; no substantive changes. 25.10A 2025-10-17
Key Security Indicators (KSI) [PDF] Minor updates to improve clarity; switch from federal information to federal customer data; add impact level metadata; no substantive changes. 25.10A 2025-10-17

In addition, simplified combined documents for each impact level are available as follows:

Markdown PDF Impact Level
All Combined [PDF] All
Low Combined [PDF] Low
Moderate Combined [PDF] Moderate
High Combined [PDF] High

Folders

  • FRMR.*.json — Requirement files
  • templates/ — Handlebars templates
  • markdown/ — Generated docs in markdown format
  • tools/ — Scripts and tests (bun / node)

Testing

  1. Install Bun: https://bun.sh

  2. Install dependencies:

    cd tools
    bun install

Things you can do include:

If changes are made, all of these things need to be run manually at the moment, in the following order:

Validate JSON:

bun test

Create Combined JSON files

bun run scripts/combine-frmr-json.ts

Generate Markdown:

bun run watch

(watches for changes and regenerates markdown)

Generate Updated TOC:

bun run scripts/generate-table-of-docs.ts

(copy/paste to README.md)

Conversion to PDF:

cd markdown
../tools/scripts/update-pdfs.sh

Broader Changes / Notes

  • October
    • Removed specific_release from JSON files (this was not really used)
    • Removed is_optional from JSON files to avoid confusion
    • Removed is_tentantive from JSON files to avoid confusion
    • Removed is_interim from JSON files to avoid confusion
    • Removed comment field from releases and replaced with comments array in JSON files

About

FedRAMP Machine Readable Documentation

Resources

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • TypeScript 79.9%
  • Handlebars 19.7%
  • Shell 0.4%