This repository is for FedRAMP's two active community working groups that are open entirely to the public. These working groups interact in public on GitHub Discussions with monthly summary recap sessions hosted on Zoom by FedRAMP.
This group focuses on exploring how FedRAMP can rely on automated validations to the greatest extent possible, and simply documentation and management requirements by relying on existing best practices and commercial security frameworks.
- Discussion forum link
- Google Meet Link for monthly recap sessions
This group focuses on grounding all Rev5 authorization and monitoring processes in modern security practices; revising and modifying the existing approach to enable commercial cloud providers to better deliver their services to the government.
- Discussion forum link
- Google Meet Link for monthly recap sessions
All recordings of past meetings for all working groups are at our YouTube channel, youtube.com/c/FedRAMP.