Page Info
Description: High level timelines for how the Consolidated Rules for 2026 will be produced and take effect.
Purpose: Help folks understand when all of this will happen.
FedRAMP Consolidated Rules for 2026 Release Timeline¶
FedRAMP’s Consolidated Rules for 2026 (CR26) contain all of the information necessary for FedRAMP stakeholders to participate effectively in the FedRAMP process in a format that is designed to remain mostly consistent with little change for a period of up to 2 years.
These Consolidated Rules formalize considerable changes to the FedRAMP process in alignment with statutory and policy modernization requirements, informed by over 30 public Requests for Comment (RFCs) and many pilots and beta tests during 2025 and early 2026. FedRAMP will continue iteratively implementing modernization requirements each year in a consistent and predictable cadence.
Effective Dates and Overall Applicability¶
| Milestone | Date | Explanation |
|---|---|---|
| Finalization of the Consolidated Rules | 2026-06-30 | The Consolidated Rules for 2026 will be moved from Public Preview into final status no later than the end of FY26 Q3. |
| Optional Early Adoption | 2026-07-01 | All stakeholders should begin incrementally adopting or transitioning to the Consolidated Rules for 2026, subject to specific overall applicability and effective dates within certain areas. |
| FedRAMP Ready goes Legacy | 2026-07-28 | No FedRAMP Ready submissions will be accepted after this date; providers should seek FedRAMP Rev5 Class A Certification instead. |
| Mandatory Adoption | 2027-01-01 | The Consolidated Rules for 2026 take mandatory effect for all stakeholders, subject to specific overall applicability and effective dates within certain areas. |
| Planned Release: Consolidated Rules for 2027 | 2027-07-01 | Yearly update to the Consolidated Rules targeted for release in mid-2027 and expiration in Dec 2029. |
| Planned Release: Consolidated Rules for 2028 | 2028-07-01 | Yearly update to the Consolidated Rules targeted for release in mid-2028 and expiration in Dec 2030. |
| Expiration of Consolidated Rules for 2026 | 2028-12-31 | The Consolidated Rules for 2026 reach the end of support and all stakeholders must complete their transition to either the Consolidated Rules for 2027 or 2028. |