The General Services Administration announced that the Federal Risk and Authorization Management Program, or FedRAMP, completed 114 cloud security authorizations in July for fiscal year 2025, more than double the number finished in FY 2024.
GSA said Monday FedRAMP also authorized four new cloud service offerings through the FedRAMP 20x Phase One pilot.
What Is FedRAMP 20x?
Launched in March, FedRAMP 20x is a cloud-native authorization approach that seeks to reduce red tape and advance automation to enable companies to continuously validate the security of their cloud offerings.
The framework seeks to simplify security requirements to speed up the authorization of new cloud services within weeks. It also aims to provide more flexibility and promote better collaboration between federal agencies and cloud service providers.
“FedRAMP 20x represents a critical shift from process-driven compliance to outcome-focused security, empowering agencies to adopt innovative cloud services faster while maintaining robust protections for federal data,” said GSA Acting Administrator Michael Rigas.
“The program is setting a new standard for federal IT modernization and reaffirming GSA’s commitment to delivering smarter, more secure services for Americans,” Rigas added.
Rethinking FedRAMP Cloud Authorization Model
GSA noted that it will continue to collaborate with industry and agency partners to further refine the FedRAMP 20x model.
“FedRAMP 20x has allowed us to rethink the entire authorization model and prove that security and speed can coexist in the federal space. We’re not just catching up—we’re leading,” said FedRAMP Director Pete Waterman.
Since the launch of FedRAMP 20x, GSA said it has shortened the time for cloud security authorizations from over a year on average to approximately five weeks.
