FedRAMP (Moderate Baseline)

FedRAMP provides a standardized approach for cloud service providers (CSPs) serving U.S. federal agencies. Built on NIST 800-53 Rev. 5 with FedRAMP-specific tailoring. Baselines: Low (~125 controls), Moderate (~325), High (~425). Authorization paths: JAB P-ATO and Agency ATO.