FedRAMP Modernization: Transitioning from Rev5 to 20x & CR26
IDCYSE8002

Module 1: CR26 Foundations and the FedRAMP Transition Timeline

• Examine the changes introduced by CR26 and the key milestones and dates in the FedRAMP transition timeline.

Module 2: From Rev5 Authorization to 20x Certification

• Explore how FedRAMP 20x shifts the program from the Rev5 authorization model toward a certification-based approach.

Module 3: Certification Classes, Scope, and Boundary Changes

• Review the new certification classes and evaluate how changes to system scope and authorization boundaries affect certification.

Module 4: Modernizing Packages with Security Decision Records and Structured Data

• Use Security Decision Records and structured data to replace or modernize traditional authorization package artifacts.

Module 5: Key Security Indicators and Automated Validation

• Examine Key Security Indicators and the role of continuous automated validation in demonstrating security performance.

Module 6: Ongoing Certification, Reporting, and Agency Collaboration

• Maintain certification through continuous reporting, evidence updates, and collaboration with participating agencies.

Module 7: Building a Rev5-to-20x Transition Roadmap

• Develop a practical roadmap for migrating systems, documentation, processes, and stakeholders from Rev5 to FedRAMP 20x.

Module 8: Developing a CR26 Transition Strategy Capstone

• Produce a comprehensive CR26 transition strategy that addresses certification scope, documentation, automation, reporting, and implementation priorities.