FedRAMP

1. Program basics

   Government-wide program for security assessment and authorization of cloud services.

2. Baselines and impact levels

   Certification classes replacing impact levels, with the legacy Low, Moderate and High baselines built on NIST SP 800-53.

3. Documents and templates

   System Security Plan, assessment plan and report, and POA&M templates.

4. FedRAMP 20x

   20x approach emphasizing automation and machine-readable validation.

5. Marketplace

   Marketplace of certified or authorized cloud products and their status.

6. Continuous monitoring

   Legacy continuous monitoring deliverables such as monthly scans and POA&M updates.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

• ADA (Digital Accessibility)
• CCPA / CPRA
• COPPA
• EU AI Act
• FERPA
• GDPR
• ISO/IEC 27001
• ISO/IEC 27701
• NIST AI RMF
• NIST Cybersecurity Framework 2.0
• NIST SP 800-53
• NIST SP 800-63 Digital Identity Guidelines