Resources
Rev 5 templates and planning assets for teams moving toward authorization.
SSP starters, readiness checklists, playbooks, and planning tools. Enter your email to unlock each download.
All resources
CSP Authorization Playbook
Step-by-step playbook for Cloud Service Providers pursuing FedRAMP authorization. Covers Agency and JAB paths with detailed guidance.
FedRAMP Initial Authorization Package Checklist
Comprehensive checklist of all required documents for FedRAMP initial authorization. Ensure your package is complete before submission.
FedRAMP Moderate Readiness Assessment Report (RAR) Template
Readiness Assessment Report template for FedRAMP Moderate. Use this to assess your organization's preparedness before starting formal authorization.
SSP Appendix A - Moderate FedRAMP Security Controls
Complete System Security Plan Appendix A template for FedRAMP Moderate baseline. Includes all 325 required security controls with implementation guidance and examples.
FedRAMP High Baseline System Security Plan (SSP)
Complete SSP template for FedRAMP High baseline with 421 security controls. Required for systems processing highly sensitive federal data.
Sample Security Policy Library (20+ Policies)
Collection of 20+ required security policies and procedures for FedRAMP. Includes Access Control, Incident Response, Change Management, and more.
Evidence Collection Guide by Control Family
Comprehensive guide showing what evidence is needed for each NIST 800-53 control family. Includes automated evidence sources.
FedRAMP Budget & Timeline Calculator
Interactive spreadsheet to estimate FedRAMP authorization costs and timeline based on your baseline level and current readiness.
Control Implementation Matrix Template
Excel-based matrix for tracking implementation status of all NIST 800-53 controls. Includes responsibility assignments and evidence links.
FedRAMP Readiness Assessment Checklist
Self-assessment checklist to determine if your organization is ready to begin FedRAMP authorization. Covers technical, operational, and business readiness.
FedRAMP LI-SaaS Baseline System Security Plan
Tailored SSP template for Low Impact SaaS applications. Streamlined baseline for simple SaaS products.
FedRAMP Low Baseline System Security Plan (SSP)
SSP template for FedRAMP Low baseline with 125 security controls. Ideal for systems processing publicly releasable information.