What US FedRAMP - NIST SP 800-37 Cloud Service Authorization for Federal Use requires
The Federal Risk and Authorization Management Program (FedRAMP) provides a standardised approach for federal agencies to assess, authorise, and monitor cloud services using NIST SP 800-37 Risk Management Framework and NIST SP 800-53 security controls; CSPs serving federal agencies must obtain a FedRAMP Authorization to Operate (ATO) at Low, Moderate, or High impact level.
Pillar: Cloud & SaaS · Authority: US General Services Administration (GSA) - FedRAMP Program Management Office · Version: 2.0.0 · Last updated:
Primary source: https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/final
SHA-256 integrity: 5bcd125c58f89e0b0424d08bf3fc492622a63bbd8d20161c10ce561fe57aa514
Primary Citations — 6 traced to source
- FedRAMP Program Basics and Authorization Process
- NIST SP 800-37 Rev.2 - Risk Management Framework for Information Systems
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/us-fedramp-nist-sp-800-37-cloud-authorization.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/us-fedramp-nist-sp-800-37-cloud-authorization.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/us-fedramp-nist-sp-800-37-cloud-authorization
- Back to registry: Browse all 10,099 compliance nodes