OMB Memorandum M-24-15 'Modernizing the Federal Risk and Authorization Management Program (FedRAMP)' issued July 2024 launches FedRAMP 2.0 modernization. KEY PROVISIONS: (a) streamlined authorization process - reduce 12+ month JAB authorization to less than 12 months for most CSPs through automation + reciprocity + Trusted Internet Connections-3 (TIC 3.0) coordination; (b) AUTOMATION + CONTINUOUS ASSURANCE - move from point-in-time assessments to continuous monitoring with automated assurance evidence; (c) PERMANENT FedRAMP authorization (subject to ongoing ConMon) replacing the prior expiration-and-renewal model; (d) SHARED ARTEFACTS + REPOSITORIES across agencies + StateRAMP + GovRAMP reducing duplicate effort; (e) FedRAMP BOARD restructure including chartered membership + governance + transparency improvements; (f) integration with the Cybersecurity Executive Orders (EO 14028 + EO 14110) + the National Cybersecurity Strategy. Implementation: GSA + the FedRAMP PMO + the JAB are progressively rolling out the M-24-15 modernization through 2025-2026.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.