Skip to main content
Pricing
Sign inRequest demo
FRC-CLA-ASFMUSTAll frameworksImplementation guide coming soon

Approved Alternative Security Frameworks

FedRAMP Certification (FRC) · FedRAMP Class A Certification Rules

Applies to: Providers
Who this applies to
Providers
Service class
All service classes
Force
MUST
Timeframe
No fixed timeframe

Reviewed implementation guidance for FRC-CLA-ASF is not published yet. The official source below remains complete and authoritative.

Information required

  • FedRAMP Rev5 (including FedRAMP Ready) at any historical Impact Level
  • SOC 2 Type II
  • GovRAMP at any Impact Level

Official FedRAMP source

Verbatim from FedRAMP/rules

Providers seeking a FedRAMP Class A Certification MUST have completed a certification or equivalent process, including an independent assessment if applicable, from one of the following alternative security frameworks within the past 12 months:

Defined terms in this requirement

ProviderSecurity Category

Operationalize this rule

Boundera turns FedRAMP 20x requirements like FRC-CLA-ASF into assigned evidence, remediation work, and validation workflows.

Request demo

Change history

  • 2026-06-24Official launch of the FedRAMP Consolidated Rules for 2026.

Content provenance

Official requirement text is sourced from FedRAMP/rules . Boundera implementation guidance has not been fully reviewed for this item.