New Website Launch: automate.fedramp.gov
July 11 | 2024
By Dave Waltermire
FedRAMP’s Automation Website: A New Hub for Technical Documentation and Guidance on Digital Authorization Packages
Today, we are launching automate.fedramp.gov. This is a new technical documentation hub designed specifically to support cloud service providers (CSPs) in the development, validation, and submission of digital authorization packages, and the developers of governance, risk, and compliance (GRC) applications and other tools that produce and consume digital authorization package data.
The website is initially focused on documenting FedRAMP’s use of the Open Security Controls Assessment Language (OSCAL) to support digital authorization packages – a foundational piece of operating FedRAMP in a data-first way. We plan to expand the website over time as we bring new capabilities online, and it will eventually include details of how to integrate with FedRAMP’s package repository and submission processes.
Please note that this site replaces the previously published FedRAMP OSCAL User Guides with reorganized content that allows for linking to specific sections of the guides and makes it possible for community members to contribute to the guide content. This work realigns the guidance to provide a digital-first public experience as required by OMB memorandum M-23-22.
automate.fedramp.gov offers detailed technical documentation, best practices, and guidance for creating and managing digital authorization packages with OSCAL. This site will help make the FedRAMP authorization process more efficient and accessible by:
- Providing faster and more frequent documentation updates
- Expanding the breadth and depth of available technical documentation
- Improving the user experience for stakeholders who are implementing OSCAL-based FedRAMP packages and tools
- Establishing a collaborative workflow that supports community contributions for improvements to the documentation
As with our automation work generally, this website is open source, and anyone is welcome to open an issue to provide feedback, or file a pull request to suggest changes or improve the content.
Work With Us
For updated information on FedRAMP automation pilots and the automation platform, please follow the FedRAMP pilot program web page and look for automation-related blogs on fedramp.gov.
Your input is invaluable as we continue to enhance and improve the site. For any questions or feedback on how we can improve on meeting your needs, you can open an issue thread on the website repository, or email us at info@fedramp.gov. We look forward to hearing from you!
