FedRAMP

US Federal Risk and Authorization Management Program — the US government's authorization process for cloud services.

FedRAMP standardises security assessment, authorization and continuous monitoring for cloud products sold to US federal agencies. Agencies grant Authorizations to Operate (ATOs) based on 3PAO-conducted assessments against NIST SP 800-53 control baselines (Low / Moderate / High).