Cloud & FedRAMP Authorization Certificate Program (Self-Paced)
IDCYSE.CP.L3.SP

Foundational to Advanced Self-Paced Online 4 Courses 48 Hours ~4.8 CEUs

Evaluate, authorize, and maintain secure federal cloud services — and get ahead of FedRAMP's move to the 20x model.

$3,679 48 clock hours Live Support Start anytime

This program includes

  • 48 hours of project-based training from experts
  • Answers from real instructors
  • Retake for free within 1 year
  • Access to class recordings (30 days)
  • Verified digital certificate of completion
  • Accredited program
  • Credits: 4.8 CEUs
  • Quizzes to reinforce learning

As agencies move to the cloud, someone has to evaluate cloud services, run the authorization, and keep them compliant as the rules change. This program moves from cloud security fundamentals through the FedRAMP agency authorization process and package due diligence, and finishes with the transition to FedRAMP 20x under the Consolidated Rules for 2026. It aligns to FedRAMP, NIST SP 800-53, and the shared responsibility model, and is timed to the CR26 mandatory date of January 1, 2027.

Prepares you for: federal cloud authorization roles, and preparation toward the ISC2 CCSP and CSA CCSK.

Read more

Courses in this Certificate Program

This is the recommended order, but some courses may be taken in a different order.

Download Syllabus PDF

Unit 1 1 Day

Cloud Security Fundamentals for Federal Employees (Self-Paced) (Coming Soon)
  • Describe cloud service models and core federal cloud concepts
  • Explain FedRAMP's role in federal cloud governance
  • Apply the shared responsibility model to real scenarios
  • Identify core identity, access, and data-protection practices in the cloud
  • Describe secure configuration and vulnerability management
  • Explain cloud monitoring, incident reporting, and risk response

Unit 2 12 Hours

FedRAMP for Agency Buyers: Authorization Process and Cloud Service Selection (Intermediate) Course (Self-Paced)

This course equips federal program managers, contracting officers, and ISSOs with the practical skills to evaluate FedRAMP-authorized cloud services, execute the agency ATO process, and manage ongoing compliance obligations. Participants learn to review FedRAMP security packages, document shared responsibility, and oversee continuous monitoring throughout the cloud service lifecycle.

  • FedRAMP authorization framework, including JAB vs. Agency ATO paths, impact levels, and the FedRAMP Marketplace.
  • Security package review: evaluating SSPs, SARs, and POA&Ms for cloud service selection and risk acceptance.
  • Shared responsibility and control inheritance documentation between agencies and cloud service providers.
  • Agency ATO development for FedRAMP-authorized services, including residual risk identification and AO risk acceptance.
  • FedRAMP continuous monitoring obligations, including monthly vulnerability scans, significant change notifications, and annual assessments.
  • Cloud incident response under FedRAMP shared obligations, including US-CERT notification and CSP coordination.

Unit 3 18 Hours

FedRAMP for Agency Buyers: Package Due Diligence and Cloud Security Program Management (Advanced) Course (Self-Paced)

This advanced course develops the execution mastery and enterprise leadership skills needed to manage a federal cloud security program at scale. Participants conduct deep authorization package due diligence, evaluate CSP accountability, engineer customer responsibility documentation, and build the governance structures required to manage cloud security risk across multi-CSP federal portfolios.

  • Authorization package due diligence: SSP and SAR analysis, penetration test report review, and POA&M health assessment.
  • Customer Responsibility Matrix engineering: identifying inherited control gaps and developing agency supplemental documentation.
  • Agency ATO documentation for FedRAMP-leveraged systems, including residual risk assessment and interconnection documentation.
  • FedRAMP continuous monitoring program design, including CSP deliverable oversight, significant change notifications, and escalation procedures.
  • Enterprise cloud security governance, including portfolio risk aggregation, vendor management, and executive-level reporting.
  • Procurement strategy and contractual cloud security protections, including incident response SLAs, data portability, and supply chain risk provisions.

Unit 4 2 Days

FedRAMP Modernization: Transitioning from Rev5 to 20x & CR26 (Self-Paced) (Coming Soon)
  • Explain CR26 and the FedRAMP modernization timeline through 2028
  • Contrast Rev5 authorization with 20x certification
  • Describe the new certification classes and boundary changes
  • Modernize packages using Security Decision Records and structured data
  • Apply Key Security Indicators and automated validation
  • Build a Rev5-to-20x transition roadmap
A group of adult learners sits in a classroom, smiling and engaged in a government training session.
A government training instructor in a suit gestures while teaching in front of a whiteboard covered with notes and diagrams.
A person in professional attire holds a Graduate School USA folder, symbolizing participation in government training programs.

Related Courses: Compare to the Cloud & FedRAMP Authorization Certificate Program (Self-Paced)

These related courses share skills and topics with the Cloud & FedRAMP Authorization Certificate Program (Self-Paced). Select up to two and tap Compare selected courses to view a side-by-side comparison.

Group Training

Since 1921, Graduate School USA has partnered with over 125 federal agencies and trained more than one million federal employees. Led by instructors with deep, real-world knowledge of federal regulations, policies, and practices, our private group programs are practical, mission-driven, and tailored to your agency’s objectives. We offer expertise across key federal domains—including human resources, financial management, acquisition and contracting, leadership, and more—to deliver training where and how your team needs it.

Complete this form and we’ll get back to you within 1 business hour.

The Fact Is – We’ve Been Government’s Training Partner Since 1921

400+ Courses & Certificates 125+ Federal Agencies Served 200+ Subject-Matter Experts