Certification Package

Definition

Verbatim from FedRAMP/rules

Has meaning from 44 USC § 3607 (b)(8) given to "authorization package", which is "the essential information that can be used by an agency to determine whether to authorize the operation of an information system or the use of a designated set of common controls for all cloud computing products and services [certified] by FedRAMP."

Notes

• In FedRAMP documentation, certification package always refers to a FedRAMP Certification Package unless otherwise specified.

Used in 14 rule requirements

This term is a defined part of the following FedRAMP rule requirements — when it appears in a rule, this definition applies precisely.

References

44 USC § 3607 (b)(8)

Change history

• 2026-07-04Initial reset for the Consolidated Rules for 2026 Public Preview.