April, 2025 (FY25 Q3)

• 2025-04-11: Clarified on the About FedRAMP Marketplace page that FedRAMP Authorized cloud service offerings without an active agency authorization to operate (ATO) who continue to meet all ongoing continuous monitoring activities while working to obtain a new ATO from a federal agency may remain in the FedRAMP Marketplace as FedRAMP Authorized.
• 2025-04-07: Added top level Outcomes for all recently closed Requests for Comment.
• 2025-04-02: Closed all open Requests for Comment. FedRAMP will review comments and provide updates or take action as appropriate.

March, 2025 (FY25 Q2)

• 2025-03-21: GSA announces a new direction for FedRAMP, with significant changes to the website and press engagement.
• 2025-03-21: GSA announces Community Working Groups to engage directly with FedRAMP experts and collaborate on innovative solutions and our Phase One goals.

January, 2025 (FY25 Q2)

• 2025-01-28: The Emerging Technology Prioritization Framework page has been removed per Executive Order “Initial Rescissions of Harmful Executive Orders and Actions”
• 2025-01-20: President Donald J. Trump takes office and appoints new leadership for the General Services Administration.

---

Historical Activity

January, 2025 (FY25 Q2)

• 2025-01-16: Added RFC-0004 Boundary Policy for comment
• 2025-01-16: Updated FedRAMP Policy for Cryptographic Module Selection and Use
  • This policy was approved by the FedRAMP Board on January 16, 2025 and is effective immediately.
  • Download the PDF version of the Policy
• 2025-01-16: Updated the Agile Delivery Pilot page to indicate Pilot Phase 1 has concluded and recommendations for updating the SCR process will be forthcoming.
• 2025-01-13: Updated Emerging Technology Framework to remove fixed application windows

December, 2024 (FY25 Q1)

• 2024-12-26: Added RFC-0003 Review Initiation Checks (RICs) for comment
• 2024-12-20: New Blog Post and Comment Request: Exploring new ways to scale FedRAMP
  • Review submitted comments here
• 2024-12-19: New Blog Post: FedRAMP, Looking Back on 2024, Ahead to 2025
• 2024-12-19: Added Requests for Comment tracker.
  • Added RFC-0001 A New Comment Process for FedRAMP for comment
  • Added RFC-0002 Proposed Revisions to FedRAMP 3PAO Requirements for comment
• 2024-12-13: Added a Joint Authorization Board (JAB) Transition page to show progress on implementation of M-24-15 with the rescission of the JAB.
• 2024-12-10: Updated content on Governance page to accurately explain various FedRAMP stakeholders after changes in M-24-15.
• 2024-12-06: Updated content on the FedRAMP Platform to show current progress.

November, 2024 (FY25 Q1)

• 2024-11-07: Modified web page to host a clear Updates & Priorities section.
  • Released early so the content is available with visual updates and look-and-feel to follow later; faster is sometimes preferred.
  • Released this changelog
  • Moved some pages around for clarity and consistency
  • Added a FedRAMP Platform update page to share the ongoing status of our implementation of a centralized GRC platform and automation tool for FedRAMP.
  • Added a beta version Policy and Guidance Updates page to track our activities related to updating core policies and guidance, especially when public comment is required.
  • More to come over the following weeks.

October, 2024 (FY25 Q1)

• 2024-10-15: Launched the FedRAMP Help Center
  • Related blog post: “The FedRAMP Help Center”

Fiscal Year 2024 (FY24) Ends

• FedRAMP completed 49 authorizations in FY24
  • 3 authorizations performed by the JAB
  • 46 authorizations via the agency authorization path
• GSA and other federal agencies continue operations without appropriations changes for FY25 under a continuing resolution

September, 2024 (FY24 Q4)

• 2024-09-27: Six cloud service offerings were selected for initial participation in the Agile Delivery Pilot
  • Related blog post: “FedRAMP Agile Delivery Pilot Update”
• 2024-09-09: Public comments on draft guidance update for implementing FIPS-140 cryptographic modules are now closed.
  • Review the public comments submitted here.
• 2024-09-05: Public comments on draft metrics for measuring the FedRAMP experience are now closed.
  • Review the public comments submitted here
• 2024-09-03: New blog post: The Missing Piece of Our Modernization Puzzle: The FedRAMP Platform

August, 2024 (FY24 Q4)

• 2024-08-31: The first in a series of application window periods for the Emerging Technology Prioritization Framework for AI has closed.
• 2024-08-28: Announced a Digital Authorization Package Pilot
  • Related blog post: “Digital Authorization Package Pilot Launch”
• 2024-08-26: A new FedRAMP Director entered on duty to lead the GSA FedRAMP Program Management Office.
  • Related blog post: “Welcoming a New Leader for a New FedRAMP”
• 2024-08-12: JAB transition update and shift of all cloud services to FedRAMP Authorized reguardless of agency or JAB pathway
  • Related blog post: “Moving to One FedRAMP Authorization: An Update on the JAB Transition
• 2024-08-09: Released a draft guidance update for implementing FIPS-140 cryptographic modules for public comment.
  • Related blog post: “Strengthening the Use of Cryptography to Secure Federal Cloud Systems”

July, 2024 (FY24 Q4)

• 2024-07-30: Release of draft metrics to measure the FedRAMP authorization experience for public comment.

  • Related blog post: “FedRAMP Metrics for Public Comment”
  • Review the proposed metrics here
• 2024-07-25: The Office of Management and Budget’s Memorandum M-24-15 “Modernizing the Federal Risk and Authorization Management Program (FedRAMP)“ is released to the public.
  • Related blog post: “The Next Phase of FedRAMP”
• 2024-07-11: Launch of the FedRAMP Automation Website automate.fedramp.gov
  • Related blog post: “[New Website Launch: automate.fedramp.gov]2024-07-11-new-website-launch-automate-fedramp-gov/)”
• 2024-07-10: Launch of a new pilot program, the FedRAMP Agile Delivery Pilot.
  • Related blog post: “The FedRAMP Agile Delivery Pilot”

June, 2024 (FY24 Q3)

• 2024-06-27: Release of the Emerging Technology Prioritize Framework in response to Executive Order (EO) 14110 on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence.
  • Related blog post: “Release of Emerging Technology Prioritization Framework”

March, 2024 (FY24 Q2)

• 2024-03-28: FedRAMP releases a program roadmap to convey strategic goals and the work being prioritized to progress towards them.
  • Related blog post: “A New Roadmap for FedRAMP”