• Skip to primary navigation
  • Skip to main content
  • Skip to footer
  • A2LA Annual Conference
  • Apply
  • Blog
  • Accreditation Estimate Request Form
  • Portal
  • Search Organizations
a2la logo

A2LA

A Better World Through Accreditation

  • Accreditation
    • ISO/IEC 17025 – Testing/Calibration Laboratories
      • Acoustics and Vibration Testing
      • Biological Testing Program
        • Cannabis Testing
        • Food And Pharmaceutical Accreditation
        • NAHLN Veterinary Diagnostic Accreditation Program
        • FDA ASCA Pilot Program (Basic Safety And Essential Performance)
        • Threat Agent Testing Laboratory Accreditation Program
        • FDA ASCA Pilot Program (Biocompatibility Testing Of Medical Devices)
      • Calibration
      • Chemical Testing
        • NAHLN Veterinary Diagnostic Accreditation Program
        • Competition Animal Drug Testing Laboratory Accreditation Program
        • Food And Pharmaceutical Accreditation
        • A2LA Consumer Product Safety Testing (CPSC)
        • Cannabis Testing
        • WADA Testing Accreditation
        • Oregon Toxic-Free Kids Act Accreditation Program
        • Threat Agent Testing Laboratory Accreditation Program
      • Construction Material Testing Accreditation
        • Harris County, TX/City Of Houston/Houston Port Authority
      • Electrical Testing Accreditation
        • The A2LA U.S. Federal Communications Commission Equipment Authorization Program
        • CTIA Wireless Association – LTE/CDMA Devices
        • A2LA Consumer Product Safety Testing (CPSC)
        • Bluetooth Testing Program
        • EPA ENERGY STAR Accreditation Program
        • NAVAIR
        • Automotive EMC Laboratory Recognition Program (AEMCLRP)
        • Notified Body Accreditation Program
        • The A2LA Project 25 (P25) Compliance Assessment Program
        • FDA ASCA Pilot Program (Basic Safety And Essential Performance)
        • ISED Equipment Authorization Program
      • Environmental Testing Accreditation
        • The A2LA CA ELAP Laboratory Assessment Program
        • EPA National Lead Laboratory Accreditation Program (NLLAP)
        • Kentucky Underground Storage Tank (UST) Testing Program
        • DOECAP Audit Program Accreditation
        • DOD Environmental Laboratory Accreditation Program
        • TNI Field Sampling & Measurement Organization (FSMO) Accreditation Program
        • Air Emission Testing Body Assessment Program (AETBs)
        • DOD Advanced Geophysical Classification Accreditation Program (DAGCAP)
        • Wyoming Storage Tank Remediation (STR) Program
        • State Environmental Laboratory Assessment Program – NELAP
      • Forensic Examination Accreditation Program
      • Geotechnical Accreditation Program
        • Harris County, TX/City Of Houston/Houston Port Authority
        • Putting Green Laboratory Accreditation Program (PUG)
      • Information Technology
        • Gaming Standards Association (GSA)
        • Internet Protocol Version 6 (IPv6)
      • Mechanical Testing Accreditation
        • A2LA Consumer Product Safety Testing (CPSC)
        • EPA ENERGY STAR Accreditation Program
        • Business & Institutional Furniture Manufacturer’s Association Compliant Program
        • Counterfeit Part Avoidance Testing
      • Nondestructive Testing Program – NDT
      • Sampling & Testing Accreditation
      • Sustainable Energy Testing
        • EPA ENERGY STAR Accreditation Program
      • Thermal
        • A2LA Consumer Product Safety Testing (CPSC)
        • EPA ENERGY STAR Accreditation Program
    • ISO/IEC 17020 – Inspection Bodies
      • ISO/IEC 17020 – Inspection Body Accreditation Program
        • Forensic Examination Accreditation Program
        • Special Inspections Accreditation Program
        • Cybersecurity Inspection Body Program
        • FedRAMP Third-Party Assessment Organizations (3PAO)
        • Field Evaluation Body (FEB) Accreditation Program
        • Notified Body Accreditation Program
    • ISO/IEC 17065 – Product Certification Bodies
      • ISO/IEC 17065 Product Compliance Certification Accreditations
        • The A2LA Telecommunication Certification Body Program
        • EPA WaterSense Program
        • EPA ENERGY STAR Accreditation Program
        • Notified Body Accreditation Program
    • ISO/IEC 17043 – Proficiency Testing Providers
      • The A2LA Proficiency Testing Provider Accreditation Program
    • ISO 17034 – Reference Materials Producers
      • ISO 17034 – Reference Materials Producers Accreditation Program
    • ISO 15189 and CLIA – Clinical Testing Laboratories
      • ISO 15189 & CLIA – Clinical Testing Laboratories Accreditation Program
    • ISO 20387 – Biobanking Accreditation Program
      • ISO 20387 – Biobanking Accreditation Program
  • About
    • Overview
    • Board of Directors
    • Careers
    • Leadership
    • Recognitions
    • Regulators and Specifiers
  • Resources
    • Acronym Glossary
    • Annual Reports
    • Documents
    • Downloadable Content
    • FAQs
    • Press Releases
    • Training By A2LA WPT
  • Our Membership Options
  • Get a Quote
  • Online Payment

Updated R311 FedRAMP Requirements Released

Home » Press Releases » Updated R311 FedRAMP Requirements Released

September 19, 2023 by A2LA

Due to the recent release of the updated FedRAMP R311 requirements document, we have been tasked with ensuring all accredited 3PAOs are now meeting the updated requirements. This will primarily occur through upcoming A2LA renewal assessments.

These requirements are in effect immediately and will be assessed as such during your next assessment. We would like to highlight a few of the changes below but encourage you to review the document in its entirety.

  • We are moving from Word documents to electronic forms for the A2LA F337 – After Action Report for 3PAOs and A2LA F338 – CSP Evaluation Form. Please utilize the links here or in the R311 for all assessments moving forward. The Word documents (F337/F338) are now obsolete.
  • Per the FedRAMP Authorization Act, we are now collecting information on your organization’s foreign ownership, control, or influence (FOCI) annually when your A2LA assessment is generated. This will be done utilizing the FedRAMP 3PAO FOCI Declaration Form and any changes to your status must be reported within 48 hours following the change.
  • Additional certifications were added to the approved list for penetration testers. Please review the document closely for these updates.
  • Clarified the type of assessments (FedRAMP Readiness, initial authorization, and annual assessments) where the staffing requirements are applicable. Additionally, clarification was provided on the type of assessments (FedRAMP Readiness and LI-SaaS initial authorization/annual assessment) that require two rather than three personnel on the assessment team.
  • A requirement was added regarding a 3PAO being revoked by FedRAMP twice resulting in them no longer being eligible to return to the program.

A2LA and the FedRAMP PMO will be co-hosting a listening session on September 21 where an additional overview of these changes will be provided.

Questions about the updated requirements may be directed to A2LA Cybersecurity Program Manager, Ashley Kamauf, at akamauf@A2LA.org and programmatic FedRAMP questions may be directed to the FedRAMP Program Manager, John Hamilton, at info@FedRAMP.gov.

FedRAMP Third Party Assessment Organization (3PAO),  Press Releases A2LA,  Accrediation,  FedRAMP,  Inspection Body,  third-party accreditation body

Footer

Headquarters 5202 Presidents Court, Ste 220
Frederick, MD 21703
301.644.3248
info@A2LA.org
Social Icon
Social Icon
Social Icon
Social Icon
  • Careers
  • Contact A2LA
  • Lodging a Complaint
  • Get Involved
  • Privacy Agreement
  • Online Payment
  • A2LA Annual Conference
  • Apply
  • Blog
  • Accreditation Estimate Request Form
  • Portal
  • Search Organizations

© 2023 A2LA · Powered by Orases Custom Software · Website Privacy Policy & Terms of Use