GovRAMP is seeking stakeholder feedback on Request for Comments (RFC) GR-2601: Proposed 20x Delta Assessment, an approach intended to align FedRAMP 20x with GovRAMP's NIST-aligned security verification requirements. The proposal focuses on annual assessment requirements and seeks to reduce duplicative assessment efforts while maintaining consistent, risk-based security assurance for government.
Participation is open to GovRAMP members and non-members, including government agencies, cloud service providers, third-party assessment organizations (3PAOs), consultants, and other interested stakeholders.
Your feedback will help inform GovRAMP's evaluation of the proposed approach. Respondents are encouraged to provide input on the questions most relevant to their experience and expertise. Responses to individual feedback questions are optional.
Responses will be summarized and reported in aggregate. Individual respondents and organizations will not be identified or attributed.
The public comment period runs November 2 through December 4, 2026. All responses must be submitted by Friday, December 4, 2026, at 5:00 p.m. ET.
Review the RFC and Supporting Materials:
Review the Request for Comments (RFC) GR-2601 →
Download the GR 20x Delta Analysis Record →
Please note: The analysis workbook is a large file and may take a moment to load.
Participation is open to GovRAMP members and non-members, including government agencies, cloud service providers, third-party assessment organizations (3PAOs), consultants, and other interested stakeholders.
Your feedback will help inform GovRAMP's evaluation of the proposed approach. Respondents are encouraged to provide input on the questions most relevant to their experience and expertise. Responses to individual feedback questions are optional.
Responses will be summarized and reported in aggregate. Individual respondents and organizations will not be identified or attributed.
The public comment period runs November 2 through December 4, 2026. All responses must be submitted by Friday, December 4, 2026, at 5:00 p.m. ET.
Review the RFC and Supporting Materials:
Review the Request for Comments (RFC) GR-2601 →
Download the GR 20x Delta Analysis Record →
Please note: The analysis workbook is a large file and may take a moment to load.