FedRAMP Rev 5
Program governance and scope under OMB M-24-15 (scope, presumption of adequacy, authorization paths, automation, agency duties) – FedRAMP Rev 5

FedRAMP Rev 5 G.9: Agency duties on authorization and reuse

What does G.9 require?

On issuing an authorization to operate or use based on a FedRAMP authorization, each agency must provide the letter and relevant supplementary information, including agency-specific configuration information, to the program office; ensure its authorization artifacts meet FedRAMP requirements and are of sufficient quality for reuse; provide materials in machine-readable interoperable formats; leverage other agencies' materials in the repository to the greatest extent possible; and ensure relevant contracts incorporate the FedRAMP security authorization requirements GSA establishes. Within 180 days of M-24-15 each agency had to issue or update agency-wide policy promoting cloud services that meet FedRAMP requirements.

Maintained by Gerard BlokdykControl text last updated

Other controls in Program governance and scope under OMB M-24-15 (scope, presumption of adequacy, authorization paths, automation, agency duties) – FedRAMP Rev 5

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll FedRAMP Rev 5 controls