Our Origin Story
The Federal Risk and Authorization Management Program or FedRAMP® was originally established on December 8, 2011, by the Office of Management and Budget (OMB) to “provide a cost-effective, risk-based approach for the adoption and use of cloud services to Executive [branch] departments and agencies.” In just five short years, FedRAMP grew to “authorizing” approximately 80 commercial cloud services, becoming the trusted bridge between industry and government.
With the help of additional direction and support from OMB’s Office of the Federal Chief Information Officer (OFCIO), the FedRAMP Authorization Act was enacted as part of the Consolidated Appropriations Act of 2022, codifying FedRAMP into law, and removing the requirement to operate solely under OMB policy guidance. As a result, FedRAMP was “reestablished” with more authority and more stability, cementing its place as a permanent fixture in the federal cybersecurity landscape.
Today, FedRAMP is backed by OMB Memorandum 24-15 Modernizing the Federal Risk and Authorization Management Program (FedRAMP), providing access to over 530 certified cloud service solutions to over 275 federal agencies in all branches of government. The FedRAMP Marketplace offers a searchable and sortable online repository of over 700 cloud products and services across six different certification status levels: Agency Authorization in Process, FedRAMP Certified, FedRAMP Certified (In Remediation), FedRAMP In Process, Initial in Process or Legacy FedRAMP Ready.
FedRAMP is part of a suite of shared services under the General Service Administration’s Technology Transformation Services (TTS). TTS exists to design and deliver a digital government with and for the American people. TTS applies modern methodologies and technologies to improve the lives of the public and public servants. With programs like FedRAMP, Login.gov and Cloud.gov, TTS helps agencies make their services more accessible, efficient, and effective with modern applications, platforms, processes, personnel, and software solutions.