Skip to main content
WhyHow It WorksFeaturesPricingBlog
Sign inRequest demo
SCN-TRF-NAVMUSTAll frameworksImplementation guide coming soon

Notification After Verification

Significant Change Notifications (SCN) · Transformative Changes

Applies to: ProvidersTimeframe: 5 business days
Who this applies to
Providers
Service class
All service classes
Force
MUST
Timeframe
5 business days

Reviewed implementation guidance for SCN-TRF-NAV is not published yet. The official source below remains complete and authoritative.

Information required

  • Updates to all previously sent information
  • Summary of any new risks identified and/or vulnerabilities resulting from the change (if applicable)
  • Copy of the security assessment report (if applicable)

Notification

  • Notify All Necessary Parties via update: FedRAMP Certification Data

Official FedRAMP source

Verbatim from FedRAMP/rules

Providers MUST notify all necessary parties within 5 business days after completing the verification, assessment, and/or validation of transformative changes, also including the following information:

Defined terms in this requirement

All Necessary PartiesProviderTransformative ChangeValidationVerificationVulnerability

Change history

  • 2026-05-04Initial reset for the Consolidated Rules for 2026 Public Preview.

Content provenance

Official requirement text is sourced from FedRAMP/rules . Boundera implementation guidance has not been fully reviewed for this item.