GSA releases fast-lane FedRAMP template

The General Service Administration has rolled out a uniform template that cloud service providers can use to get into its "FedRAMP Ready" program.

In an Aug. 9 blog post, Federal Risk and Authorization Management Program Director Matt Goodrich said the FedRAMP Readiness Assessment Report Template is a "pre-audit" that CSPs  can use to show their readiness to get a FedRAMP Authorization to Operate.

The final version of the template "reflects industry feedback," according to Goodrich. Its development was part of the includes FedRAMP Accelerated changes FedRAMP began making in its program this spring.

For instance, Goodrich said the assessment report identifies minimum requirements for CSPs and clarifies guidance for third-party assessment organizations. Rather than the bulk documentation used previously, the report concentrates on key capabilities, allowing CSPs to move through the approval process more quickly, while still providing federal agencies with a solid initial idea of their capabilities.

CSPs, said Goodrich, can immediately use the template for Readiness Assessments by FedRAMP 3PAOs.

CSPs with approved reports are then designated as "FedRAMP Ready," meaning they are "likely to attain" a provisional ATO through the Joint Authorization board, or an ATO from an individual agency.