MUST NOT
FedRAMP release 2026.10.13.01Definition last changed Checked against FedRAMP/rules
Definition
Verbatim from FedRAMP/rules
The rule is an absolute prohibition. Parties MUST meet such rules and address them in their security documentation. Failure to follow the rule is a vulnerability likely requiring corrective action and/or the denial of initial or ongoing FedRAMP Certification.
Notes
- This definition only applies when the term is used in all capital letters in FedRAMP materials, otherwise the plain language meaning applies.
Rules that use this term
FedRAMP does not tag this term on individual rules, so no per-rule list is shown.
Change history
2026-09-13Added force to FedRAMP Definitions for clarity.