This repository contains FedRAMP 20x standards, technical assistance, and other materials in both machine-readable and human-readable formats.
See IDENTIFIERS.md for explanations about the naming and structure of these materials.
| Materials | Description | Version | Effective Date(s) | Human Readable Versions |
|---|---|---|---|---|
| Key Security Indicators (KSI) | Key Security Indicators in this release are unchanged from previously releases. 25.05C adds references for each KSI to underlying SP 800-53 controls. | 25.05C | 2025-06-28 (20xP1) | Basic: With Control References: |
| Minimum Assessment Standard (MAS) | Minor non-breaking updates for clarity and formatting; renamed to Minimum Assessment Standard; reframed FRR-MAS-01; added FRD-MAS-06. | 25.06A | 2025-06-17 (20xP1) 2025-07-30 (R5.MAS.B1, tentative) |
|
| Significant Change Notification Requirements (SCN) | Initial release of Significant Change Notification Requirements (includes Technical Assistance) | 25.06A | 2025-06-17 (20xP1) 2025-07-07 (R5.SCN.B1, tentative) |
|
| Combined 20x Low Pilot Requirements | Combined FedRAMP 20x Low Requirements (including KSI hotfix to original 25.05 release) | 25.06B | 2025-06-18 (20xP1) |
- Auto-generate indexes and combined docs
- Make JSON the source of truth for all releases
- Add GitHub actions for automation
FRMR.*.json— Requirement filestemplates/— Handlebars templatesmarkdown/— Generated docs in markdown formattools/— Scripts and tests (bun / node)
-
Install Bun: https://bun.sh
-
Install dependencies:
cd tools bun install -
Validate JSON:
bun test -
Generate Markdown:
bun run watch
(watches for changes and regenerates markdown)
Manually using md-to-pdf for now.