https://waypointca.com/blog/tags/fedramp-20x/Recent content in FedRAMP 20x onHugoen-usTue, 11 Aug 2026 00:00:00 +0000https://waypointca.com/blog/posts/fedramp-20x-compliance-becomes-code/Tue, 11 Aug 2026 00:00:00 +0000https://waypointca.com/blog/posts/fedramp-20x-compliance-becomes-code/20x is not a version bump. It replaces narrative control descriptions with automated Key Security Indicators, replaces the annual audit with continuous validation, and replaces documents with machine-readable data. Here is what that actually demands of a cloud service provider.https://waypointca.com/blog/posts/fedramp-machine-readable-september-30-deadline/Tue, 11 Aug 2026 00:00:00 +0000https://waypointca.com/blog/posts/fedramp-machine-readable-september-30-deadline/RFC-0024’s machine-readable package requirements were confirmed in NTC-0009 and finalized in the Consolidated Rules for 2026, with initial compliance due September 30, 2026. They apply to existing Rev 5 certifications, not just new applicants, and most providers have not started.