Skip to main content

Baselines

This page will continue to evolve as the TFG reaches consensus on the best representation.

There are several draft efforts to produce appropriate OSCAL catalogs and profiles representing the FedRAMP Rules (FRR) and certification classes.

These include (in no particular order):

There has been some discussion around this mapping document, but it remains a draft work-in-progress.

This
page

Suggested willHierarchy continuefor toOSCAL evolveCatalog/Profile asrepreseentation of FedRAMP's Consolidated Rules 2026 (CR26), including 20x path KSI and Rev 5 path certification baselines.

CR26_Catalog_Profile_Hierarchy.png

  • For the TFGRev reaches5 consensuscertificaiton class baselines, FedRAMP defines a few parameters and provides guidance on a few controls.
  • Where the bestdefined representation.
parameters and guidance are the same for all certification class, they are represented in the Rev 5 Tailoring" profile.
  • Where the defined parameters and guidance vary by certification baseline, they are represented in the appropriate Rev 5 Class profile.
  • FedRAMP does not allow Class A certifications for the Rev 5 path, thus a Rev 5 Class A profile is not appropriate.
    • Back to top