FedRAMP Community Working Groups

Community Working Groups

FedRAMP currently has two active community working groups that are open entirely to the public. These working groups interact primarily in public on GitHub discussions and are supported by monthly meetings around specific topics which are also open to the public to attend.

Note: Calendar buttons in the table above allow users to add the meeting series to their personal calendars. For recurring meetings, using the .ics download option is recommended for Outlook, Yahoo, Apple Calendar, and others to ensure recurrence details are included.

Historical monthly meetings are recorded and can be viewed on FedRAMP's YouTube channel.

Discussion Boards

Any member of the public may participate in our Community Working Group Discussions on GitHub:

• All FedRAMP Community Discussions
• 20x Pilot Discussions
• Rev5 Discussions
• Request for Comment Discussions

All participants in the 20x Phase Two pilot have been directed to ask questions in the FedRAMP community discussion boards to ensure all stakeholders have equal and fair access to information as FedRAMP changes - FedRAMP does not provide special answers to individual parties in private.

FSCAC Meetings

The Federal Secure Cloud Advisory Committee (FSCAC), established by GSA, is a statutory group of government officials and industry experts. It advises on improving FedRAMP and secure cloud adoption, aiming to resolve challenges, accelerate authorization, and enhance communication for compliant cloud use in federal agencies.

Meetings are held at least triannually and are open to the general public. For more information, please visit the GSA FSCAC website.

Additional Background

As a government program, FedRAMP has limitations on its ability to interact with the public compared to a typical private sector entity. For example, FedRAMP cannot ask for consensus opinions from the public, collect detailed structured feedback, provide business advice, or direct work. FedRAMP's standard disclaimers apply to all content provided by FedRAMP staff in the community working groups.

The primary goals of the community working groups are:

1. Ensure FedRAMP has direct insight into community activities, goals, achievements, best practices, etc. in specific areas to inform the creation of standards and policies prior to their formal development.
2. Ensure that FedRAMP stakeholders have equal public access to information from FedRAMP in an open forum, and semi-structured opportunities to work towards shared goals in different and innovative ways.

FedRAMP Board

The FedRAMP Board, a group of OMB-appointed senior federal technology and IT security leaders, is FedRAMP's official governing body. It establishes guidance, determines authorization requirements, ensures consistency, and oversees the modernization and government-wide adoption of secure cloud services, working with the FedRAMP Director for efficiency and standardized security. Board meetings are held monthly, but are not open to the public.

Agency FedRAMP Liaisons

FedRAMP hosts monthly virtual meetings with federal agency FedRAMP liaisons. These interactive meetings outline FedRAMP programmatic updates and changes, invite direct agency feedback, and provide a common space for agency authorization officials to collaborate. These meetings are open to federal employees and/or contractors who are actively engaged in the authorization of cloud services at their agencies. To learn more about the liaison program or to get involved, please email info@fedramp.gov for more information.

FedRAMP and OMB co-host in-person FedRAMP Day events on a quarterly basis for the agency FedRAMP liaisons and other relevant stakeholders. These events feature engagement from agency leadership, provide deep-dives into timely FedRAMP topics, and encourage collaboration among agency representatives.