FedRAMP 20x: Clarify Certification Conditions Before Contract Award

A prospective customer says its procurement calls for FedRAMP certification before award. Start with the solicitation’s exact words and milestone. A discussion about your 20x roadmap is useful only after sales, security and the agency share an understanding of what status the procurement calls for, when, and for which offering.

The relevant authority is conditional. M-24-15 allows agencies, in some circumstances, to make FedRAMP authorization a condition of contract award. It does not establish a universal answer for every opportunity.

Read the award condition with its competition limits

Section IV(e) of M-24-15 says agencies may in some circumstances require FedRAMP authorization at award, but only when there are enough vendors for effective competition or an applicable exception to legal competition requirements. The passage supplies no numerical vendor threshold.

Footnote 20 addresses both award conditions and use of FedRAMP authorization as an evaluation factor. It says their inclusion should be discussed with the agency acquisition integrated project team, including appropriate legal representation. A provider’s estimate of the competitive field does not settle that agency discussion.

This is the 2024 memo’s guidance, using its original “authorization” terminology. Reading it alongside current certification guidance does not create a new procurement rule or resolve a particular solicitation. Keep the solicitation-specific determination with the responsible contracting and legal officials.

Separate three decisions in the opportunity discussion

Current certification-path guidance places 20x on the Program Certification Path. Program Certification is provided directly by FedRAMP without federal agency sponsorship. That answers a certification-path question; it does not answer the procurement’s timing question.

The initial agency authorization guidance explains that certification supplies reusable security evidence; the agency still decides whether and how to use the service. AGU-USE-ABU requires agencies to complete the ATO process for federal information systems using FedRAMP Certified offerings. An award discussion and a provider certification plan do not replace that work.

Keep a small, accurate opportunity record

The following is an editorial coordination practice, not a FedRAMP form. Use one shared record so the commercial and security teams can reconcile what they know before making commitments:

• Exact wording: retain the solicitation provision, version and any relevant agency clarification.
• Milestone: distinguish the proposal deadline, evaluation, award and planned operational use instead of collapsing them into one date.
• Offering: identify the service and version being proposed, including the deployment under discussion.
• Current status: record the evidenced certification status separately from an application or readiness plan.
• Remaining work: list known security, assessment and submission tasks, owners and dependencies; label forecasts as forecasts.
• Clarification route: identify the agency contact and the question for contracting or acquisition counsel.

For example, an internal note could say: “The provision names certification at award. Our offering is currently preparing its application. Ask the agency which evidence and milestone the provision addresses before representing that our plan satisfies it.” This is a question to resolve, not a claim that a pending application counts as certification.

Use the agency’s response to update the record and the team’s commitments. The record supports an informed conversation; it does not determine award eligibility or predict a contract outcome.

Questions teams commonly ask

Does sponsor-free 20x certification remove an agency’s award condition?

No. The Program path explains how to obtain certification without an agency sponsor. A particular procurement condition remains a separate question under the memo’s conditional guidance and the agency’s acquisition process.

Who should discuss certification as an award condition or evaluation factor?

M-24-15 footnote 20 points to the agency acquisition integrated project team, including appropriate legal representation. Bring precise solicitation language and the offering’s actual status to that discussion.

For adjacent planning, see agency onboarding and package handoff and checking contract commitments against ongoing duties.