Skip to main content
WhyHow It WorksFeaturesPricingBlog
Sign inRequest demo
IFR-APS-ATOMUSTAll frameworksImplementation guide coming soon

Agency Authorization to Operate

Initial FedRAMP Certification (IFR) · Applying for FedRAMP Certification with an Agency Sponsor

Applies to: Providers
Who this applies to
Providers
Service class
All service classes
Force
MUST
Timeframe
No fixed timeframe

Reviewed implementation guidance for IFR-APS-ATO is not published yet. The official source below remains complete and authoritative.

Official FedRAMP source

Verbatim from FedRAMP/rules

Providers seeking a FedRAMP Rev5 Agency Certification MUST have completed the Authorization to Operate (ATO) process with their agency sponsor for the cloud service offering, concluding with a formal signed ATO letter that the agency has sent over official government channels to FedRAMP.

Defined terms in this requirement

AgencyCloud Service OfferingProvider

Change history

  • 2026-05-04Initial reset for the Consolidated Rules for 2026 Public Preview.

Content provenance

Official requirement text is sourced from FedRAMP/rules . Boundera implementation guidance has not been fully reviewed for this item.