FedRAMP Class D cloud-hosted pilot proposal
From CDG’s Oct 20 company post: Published October 15, RFC-0036 is open for comment through November 19, 2026. These are proposed pilot requirements, not final rules. The proposal concerns the Phase 4…
Source: Cyber Defense Group. Original reporting and dates are preserved.
NERSC technician and server rack, October 14, 2011. Illustrative alternative photograph; not a FedRAMP pilot, certified service or participating vendor. No endorsement implied.
Derrick Coetzee from Berkeley, CA, USA · CC0 · LicenseThe photograph above has its own source and credit. Image references in the original reporting below may describe a different image on the source publication.
Original CDG company post
FedRAMP’s new Class D cloud-hosted pilot proposal gives federal cloud providers a concrete readiness checklist to review: API-accessible certification evidence, post-quantum cryptography status documentation, and additional security indicators covering foreign ownership, control or influence.
Published October 15, RFC-0036 is open for comment through November 19, 2026. These are proposed pilot requirements, not final rules. The proposal concerns the Phase 4 cloud-hosted pilot, not self-hosted or hybrid-hosted services.
Providers targeting higher-assurance federal workloads should review the proposal and identify where their evidence and automation capabilities may need work.
Read the official proposal: https://lnkd.in/eMjA3JfN
#FedRAMP #FederalCloud #Cybersecurity #CyberDefenseGroup
Sources and references
Source publication notes
Historical technology archive. This original commentary does not describe CDG’s current consulting services and is not current security or compliance guidance.
Preserved from CDG’s company LinkedIn history. Original publication dates are retained; later updates may change the source, status, or deadlines.
The original post may reference an image. No LinkedIn or DVIDS media has been copied into this article.
Educational information, not legal advice. Current official program guidance and the instructions for your application control. Registration, certification, or consulting does not guarantee an award.