The FedRAMP Authorization Process - FedRAMP Consolidated Rules for 2026 (OMB M-24-15 Section IV)

Publisher

U.S. General Services Administration (FedRAMP PMO) reproducing OMB memorandum M-24-15

URL

https://www.fedramp.gov/2026/authority/m-24-15/process/

Published

unknown

Updated

unknown

Accessed

2026-10-02

HTTP status

200

License

US federal government work; public domain; public domain; excerpts permitted

Source notes citing this source

• A FedRAMP authorization does not replace an agency's own decision: agencies use the FedRAMP package to issue their own authorization to operate or authorization to use. in context
• A FedRAMP authorization attaches to a specific Cloud Service Offering that the FedRAMP PMO approves for the Marketplace, not to the vendor as a whole. in context
• Under OMB M-24-15, agencies must presume that the security assessment in a FedRAMP authorization package is adequate for their use at the impact level it was authorized for. in context
• A FedRAMP listing held by a vendor's government offering, such as Webex for Government, Zoom for Government or Office 365 GCC, should not be read as covering that vendor's commercial multi-tenant service. inferred in context

Cite this source record

APA

WarmTransfer. (2026, October 2). The FedRAMP Authorization Process - FedRAMP Consolidated Rules for 2026 (OMB M-24-15 Section IV). WarmTransfer. https://warmtransfer.net/knowledge/sources/fedramp-m-24-15-authorization-process

BibTeX

@misc{warmtransfer-fedramp-m-24-15-authorization-process,
  title  = {The FedRAMP Authorization Process - FedRAMP Consolidated Rules for 2026 (OMB M-24-15 Section IV)},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/fedramp-m-24-15-authorization-process},
  note   = {U.S. General Services Administration (FedRAMP PMO) reproducing OMB memorandum M-24-15, accessed 2026-10-02}
}