This repository contains FedRAMP 20x standards, technical assistance, and other materials in both machine-readable and human-readable formats.
See IDENTIFIERS.md for explanations about the naming and structure of these materials.
| Markdown | Description | Version | Published Date | |
|---|---|---|---|---|
| Authorization Data Sharing Standard (ADS) | [PDF] | Minor updates to improve clarity; switch from federal information to federal customer data; add impact level metadata; no substantive changes. | 25.10A | 2025-10-17 |
| Significant Change Notification Requirements (SCN) | [PDF] | minor updates to improve clarity; switch from federal information to federal customer data; add impact level metadata; no substantive changes. | 25.10A | 2025-10-17 |
| FedRAMP Definitions (FRD) | [PDF] | Minor updates to improve clarity; switch from federal information to federal customer data; no substantive changes. | 25.10A | 2025-10-17 |
| Minimum Assessment Standard (MAS) | [PDF] | minor updates to improve clarity; switch from federal information to federal customer data; add impact level metadata; no substantive changes. | 25.10A | 2025-10-17 |
| Vulnerability Detection and Response Standard (VDR) | [PDF] | Minor updates to improve clarity; switch from federal information to federal customer data; add impact level metadata; no substantive changes. | 25.10A | 2025-10-17 |
| Key Security Indicators (KSI) | [PDF] | Minor updates to improve clarity; switch from federal information to federal customer data; add impact level metadata; no substantive changes. | 25.10A | 2025-10-17 |
In addition, simplified combined documents for each impact level are available as follows:
| Markdown | Impact Level | |
|---|---|---|
| All Combined | [PDF] | All |
| Low Combined | [PDF] | Low |
| Moderate Combined | [PDF] | Moderate |
| High Combined | [PDF] | High |
FRMR.*.json— Requirement filestemplates/— Handlebars templatesmarkdown/— Generated docs in markdown formattools/— Scripts and tests (bun / node)
-
Install Bun: https://bun.sh
-
Install dependencies:
cd tools bun install
If changes are made, all of these things need to be run manually at the moment, in the following order:
Validate JSON:
bun testCreate Combined JSON files
bun run scripts/combine-frmr-json.tsGenerate Markdown:
bun run watch(watches for changes and regenerates markdown)
Generate Updated TOC:
bun run scripts/generate-table-of-docs.ts(copy/paste to README.md)
Conversion to PDF:
cd markdown
../tools/scripts/update-pdfs.sh- October
- Removed
specific_releasefrom JSON files (this was not really used) - Removed
is_optionalfrom JSON files to avoid confusion - Removed
is_tentantivefrom JSON files to avoid confusion - Removed
is_interimfrom JSON files to avoid confusion - Removed
commentfield from releases and replaced withcommentsarray in JSON files
- Removed