Description
FedRAMP anticipates making machine-readable package requirements effective September 30, 2026, with a one-year grace period. CSPs must submit authorization packages in machine-readable format. Services not complying after the grace period may lose FedRAMP Certification.
Requirements
- Assess current authorization package format
- Plan conversion to machine-readable format
- Implement tooling for machine-readable package generation
- Test machine-readable package submissions
- Document transition plan within grace period
Applicable To
FedRAMP Authorized CSPsCSPs seeking new FedRAMP authorization
Penalty Information
âš Loss of FedRAMP Certification for non-compliance after grace period.