The latest on FedRAMP 20x Phase 4¶
This site is under development. :)
It shouldn't be public, but if you've stumbled across it, please stand by.
FedRAMP 20x entered Phase 4 on October 1, 2026. This phase is anticipated to last until March 31, 2027.
Phase 4 will be completed successfully when FedRAMP has performed at least 3 FedRAMP 20x Class D Pilot Certifications and finished the background research necessary to develop a new model for assessing physical datacenter and facility controls based on existing commercial certifications.
Monitoring Phase 4
FedRAMP will maintain this web page during Phase 4 as the primary source of truth for all Phase 4 activities. It will always show the latest dates and information. You may see dates or information in RFCs, Community Updates, Blog Posts, or other sources that have been overcome by events, but the dates on this page should always reflect FedRAMP's current goals.
Phase 4 Engagement Tracks¶
-
The 20x Class D Pilot
Developing and testing assurance requirements for FedRAMP 20x Class D (High) with industry.
-
Agency Use Pilot
Developing and testing the new FedRAMP Board-approved Cloud Authorization Management Framework and Cloud Security Authorization process with agencies - for both FedRAMP Rev5 and 20x.
-
Self-Hosted Cloud
Working with industry to update FedRAMP requirements based on existing commercial standards for datacenter and facility management.