Alert
FedRAMP 20x: Reshaping the Look, Feel, and Speed of FedRAMP
FedRAMP 20x launched and hosted its first community working group on March 31, 2025, as part of a major overhaul to make the Federal Risk Management and Authorization Program (FedRAMP) simpler and more efficient through automation, moving away from lengthy wait times and a heavy documentation burden. Registration for the group is currently open.
The announcement was made at the Alliance for Digital Innovation on March 24, 2025, in Washington, DC.
Subject matter experts with cloud service offerings, advisors, and assessors will be able to participate in community working groups or respond to requests for comments (RFCs) to contribute ideas, opinions, or thoughts on potential solutions, which could ultimately become practice in the future.
Who’s Affected?
As with most FedRAMP initiatives, impacted parties include:
- Cloud service providers
- Third-party assessment organizations (3PAO)
- Federal agencies
- FedRAMP PMO
What Are the Goals of FedRAMP 20x?
FedRAMP 20x aims to establish new processes designed in collaboration with industry stakeholders.
Key goals for FedRAMP 20x include:
- Simplifying the automation of applications and validation of FedRAMP security requirements.
- Leveraging existing industry investments in security by inheriting best-in-class commercial security frameworks.
- Continuously monitoring security decisions using a straightforward, hands-off approach.
- Building trust between industry and federal agencies by leaning into the direct business relationships between providers and customers.
- Enabling rapid continuous innovation without artificial checkpoints that hinder progress.
What to Expect
No immediate changes are planned. The current Agency Authorization path remains the sole path to attain an authorization to operate (ATO). However, the focus of the working groups is to incorporate industry ideas to provide solutions, relying on contributions while the Program Management Office (PMO) steps back to focus on setting standards and policies.
The working groups will seek to identify solutions to simplify various aspects of the program. In the long term, a gradual yet significant shift is underway. FedRAMP’s functionality and operations will look very different from what they have over the last decade. Agencies will have significantly more input into engagements than in years past, and business models will evolve.
Participating in the working groups or responding to requests for comments (RFCs) allows everyone in this industry to contribute to FedRAMP 20x. Be informed, ask questions, make your voice heard and your opinion count.
We’re Here to Help
To learn more about FedRAMP 20x and how it can impact your business, contact your Moss Adams professional.