Sponsoring Initial FedRAMP Certification¶
FedRAMP will stop accepting applications for sponsored Agency Certifications on June 11, 2027.
FedRAMP Rev5 is a legacy process that FedRAMP is actively replacing, and FedRAMP 20x is only available via Program Certification. In most cases, agencies should encourage cloud service providers to pursue FedRAMP 20x Program Certification instead of beginning a new agency-sponsored Rev5 effort.
FedRAMP is actively changing the overall FedRAMP Certification process to align with a future strategy where only FedRAMP provides the initial FedRAMP Certification via the Program Certification Path.
This means that, in general, agencies who are currently sponsoring a cloud service provider for an Agency Certification will need to rely on legacy materials with a legacy process and may find some cloud service providers and independent assessors become confused as to why the agency is requesting additional information necessary for an agency authorization to operate.
Please review the materials in the Legacy FedRAMP Documentation Reference to begin an agency sponsored Initial FedRAMP Certification.