FedRAMP Government Certified Cloud Providers

Stages of Compliance for FedRAMP Approved Vendors

Carahsoft offers FedRAMP cloud service offerings (CSOs) for three stages of compliance:

• FedRAMP Authorized: These cloud systems have security packages reflecting the completion of the FedRAMP Security Assessment Framework. A CSP who has achieved this designation is listed on FedRAMP’s Marketplace.
• FedRAMP In Process: These cloud systems are actively working with the government through the FedRAMP Security Assessment Framework. This designation indicates the documentation to become certified is in progress. An agency is reviewing the documentation with the intent to provide an ATO that meets FedRAMP requirements. A CSP who has achieved this designation is listed on FedRAMP’s Marketplace.
• FedRAMP Ready: These systems, including both cloud systems and open source builds, are ready to begin the FedRAMP Security Assessment Framework. This compliance indicates that a Third Party Assessment Organization (3PAO) attests to a cloud service’s readiness for the authorization process, and that a Readiness Assessment Report (RAR) has been reviewed and approved by the FedRAMP PMO. This designation is also required for any cloud service to enter the Joint Authorization Board (JAB) Provisional Authority to Operate (P-ATO) process.

Discover Carahsoft’s partner marketplace for FedRAMP certified cloud solutions to support your agency.