Skip to main content

Resources

Rev 5 templates and planning assets for teams moving toward authorization.

SSP starters, readiness checklists, playbooks, and planning tools. Enter your email to unlock each download.

All resources

Guides & Playbooks

CSP Authorization Playbook

Step-by-step playbook for Cloud Service Providers pursuing FedRAMP authorization. Covers Agency and JAB paths with detailed guidance.

PDF1.4 MB19 requests
Templates

FedRAMP High Baseline System Security Plan (SSP)

Complete SSP template for FedRAMP High baseline with 421 security controls. Required for systems processing highly sensitive federal data.

DOCX215 KB2 requests
Checklists

FedRAMP Initial Authorization Package Checklist

Comprehensive checklist of all required documents for FedRAMP initial authorization. Ensure your package is complete before submission.

XLSX21 KB7 requests
Checklists

FedRAMP Moderate Readiness Assessment Report (RAR) Template

Readiness Assessment Report template for FedRAMP Moderate. Use this to assess your organization's preparedness before starting formal authorization.

DOCX129 KB5 requests
Templates

SSP Appendix A - Moderate FedRAMP Security Controls

Complete System Security Plan Appendix A template for FedRAMP Moderate baseline. Includes all 325 required security controls with implementation guidance and examples.

DOCX499 KB5 requests
Planning Tools

FedRAMP Budget & Timeline Calculator

Interactive spreadsheet to estimate FedRAMP authorization costs and timeline based on your baseline level and current readiness.

XLSX2 requests
Templates

FedRAMP LI-SaaS Baseline System Security Plan

Tailored SSP template for Low Impact SaaS applications. Streamlined baseline for simple SaaS products.

DOCX215 KB2 requests
Templates

FedRAMP Low Baseline System Security Plan (SSP)

SSP template for FedRAMP Low baseline with 125 security controls. Ideal for systems processing publicly releasable information.

DOCX215 KB2 requests
Checklists

FedRAMP Readiness Assessment Checklist

Self-assessment checklist to determine if your organization is ready to begin FedRAMP authorization. Covers technical, operational, and business readiness.

PDF3 requests
Policy Examples

Sample Security Policy Library (20+ Policies)

Collection of 20+ required security policies and procedures for FedRAMP. Includes Access Control, Incident Response, Change Management, and more.

ZIP11 requests