Skip to main content
Pricing
Sign inRequest demo
FRC-CSO-FCPMUSTAll frameworksImplementation guide coming soon

FedRAMP Certification Profile

FedRAMP Certification (FRC) · General Provider Responsibilities

Applies to: Providers
Who this applies to
Providers
Service class
All service classes
Force
MUST
Timeframe
No fixed timeframe

Reviewed implementation guidance for FRC-CSO-FCP is not published yet. The official source below remains complete and authoritative.

Official FedRAMP source

Verbatim from FedRAMP/rules

Providers MUST identify a target FedRAMP Certification Profile and apply all relevant FedRAMP Practices to the cloud service offering.

Defined terms in this requirement

Certification ProfileCloud Service OfferingFedRAMP PracticesHandleInformation ResourceProviderSecurity CategoryThird-Party Information Resource

Operationalize this rule

Boundera turns FedRAMP 20x requirements like FRC-CSO-FCP into assigned evidence, remediation work, and validation workflows.

Request demo

Notes

  • Information resources (including third-party information resources) MAY vary by security category as appropriate to the type of information handled by or impacted by the information resource.

Change history

  • 2026-06-24Official launch of the FedRAMP Consolidated Rules for 2026.

Content provenance

Official requirement text is sourced from FedRAMP/rules . Boundera implementation guidance has not been fully reviewed for this item.