FedRAMP Messaging

FedRAMP plays a significant role in connecting valuable cloud security solutions to those federal agencies that need unique and stringent security protections of their data. Therefore, promoting your relationship with FedRAMP is a great opportunity to highlight your commitment to protecting the data of millions of Americans. Messaging your FedRAMP affiliation or certification can get tricky. When we talk about the program externally, we often rely on sharing the many factual benefits of FedRAMP. We recommend using these benefits when drafting your own co-branded messaging, to the extent possible. We are also sharing a few tips on what you can and cannot say when advertising your cloud services on the FedRAMP Marketplace.

Value Proposition

FedRAMP is a government-wide program that promotes the adoption of secure cloud services across the federal government by providing a standardized approach to security and risk assessment for cloud technologies and federal agencies.

Our Brand Personality Traits

  • Trustworthy | Enforcer: we are driven by the mandates in M-24-15 to develop the framework by which the government adopts, authorizes, and implements cloud technologies.
  • Fixer | Problem-Solver: we know what’s working and what’s not, and will always seek insights from our stakeholders to deliver work that makes a real impact to the data security of our nation.

FedRAMP Benefits

  • Reduces duplicative efforts, inconsistencies, and cost inefficiencies
  • Establishes a public-private partnership to promote innovation and the advancement of more secure information technologies
  • Enables the federal government to accelerate the adoption of cloud computing by creating transparent standards and processes for security authorizations and allowing agencies to leverage security certifications on a government-wide scale

FedRAMP Key Messaging

  • FedRAMP offers a searchable and sortable online repository of certified cloud products and services on the FedRAMP Marketplace.
  • FedRAMP supports the use of emerging technologies across government and works to ensure these solutions are certified and available to federal agencies.
  • FedRAMP is the bridge between industry and government.
  • FedRAMP is a responsive federal cybersecurity program with the ability to adapt and pivot based on both industry demand and agency needs.

FedRAMP 20x Key Messaging

  • The FedRAMP legacy Rev5 certification pipeline is lengthy and costly. FedRAMP 20x charts the path for an improved user experience for all stakeholders.
  • FedRAMP 20x is FedRAMP modernization.
  • FedRAMP 20x removes historical blockers to entry on the FedRAMP Marketplace.
  • FedRAMP 20x moves beyond traditional compliance to focus on the security decisions that matter most.
  • Improving FedRAMP’s operating posture reduces government waste and improves government efficiencies for GSA and all of government.
  • A different model for cloud assurance, entry to the FedRAMP Certification pipeline no longer requires an agency sponsor.
  • With FedRAMP 20x, certification can take weeks instead of months and years.

FedRAMP Marketplace Positioning Tips

  • Be accurate and clear about your FedRAMP Marketplace listing status.
    • Example: Company ABC has a FedRAMP 12-Month Class B (Low) Certification. When promoting their cloud solution, Company ABC cannot say they have achieved or are on their way to achieve a FedRAMP Class C (Moderate) Certification.
  • Only advertise the service offerings with a FedRAMP certification. Bonus: link to your FedRAMP Marketplace listing for validation.
    • Example: Company ABC has a suite of six government cloud offerings when they were first FedRAMP Certified in 2019. The company recently added a new cloud solution to that same portfolio and plans to meet with a new federal agency customer. Company ABC cannot say their entire suite of seven government cloud offerings has a FedRAMP Certification—they can only associate their certification with those six cloud offerings.
  • Have a responsible tone in your marketing content and never suggest that your service offering is ‘the first’ on the FedRAMP Marketplace. FedRAMP is unable to substantiate a broad claim of that scale. Bonus: link to your FedRAMP Marketplace listing for validation.
    • Example: Company ABC recently received an official FedRAMP letter with their new designation. Their marketing team is eager to get out a press release touting the great benefits of their cloud solution. Company ABC should not say, “our cloud solution is the first ever fully automated FedRAMP Class D (Moderate) Certified cloud solution on the FedRAMP Marketplace.”