#FedRAMP #NDAA

As the National Defense Authorization Act (NDAA) has passed both the Senate and the House it is now expected to be signed by President Biden. It has language that changes FedRAMP.

From Fedscoop:

• It establishes a board & cloud advisory comm.
• Includes a "presumption of adequacy" which seems to mean "cloud service offering has met baseline security standards established by the program and should be considered approved for use across the federal government." source
• establishes some expectation of assessment metrics and annual report.

The bill H.R.7776 can be tracked at Congress.gov, specific language in case you are incredibly bored is Sec.5921 FedRAMP Authorization Act text
#HR7776