Skip to main content
WhyHow It WorksFeaturesPricingBlog
Sign inRequest demo
SCN-CSO-NOMMAYAll frameworksImplementation guide coming soon

Notification Mechanisms

Significant Change Notifications (SCN) · General Provider Responsibilities

Applies to: Providers
Who this applies to
Providers
Service class
All service classes
Force
MAY
Timeframe
No fixed timeframe

Reviewed implementation guidance for SCN-CSO-NOM is not published yet. The official source below remains complete and authoritative.

Official FedRAMP source

Verbatim from FedRAMP/rules

Providers MAY notify necessary parties in a variety of ways as long as the mechanism for notification is clearly documented in the FedRAMP Certification package and easily accessible.

Defined terms in this requirement

AgencyCertification PackageProvider

Notes

  • The sharing mechanism should be designed based on the needs of the provider and their customers and may vary between providers.
  • The default sharing mechanism for most providers during the SCN beta was to send an email to agency customers and upload a copy of the notification to the provider's secure sharing location.

Change history

  • 2026-05-04Initial reset for the Consolidated Rules for 2026 Public Preview.

Content provenance

Official requirement text is sourced from FedRAMP/rules . Boundera implementation guidance has not been fully reviewed for this item.