Skip to main content
U.S. flag

An official website of the United States government

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Release of cloud.gov Pages Customer Responsibility Matrix (CRM)

November 15, 2022

Our website publishing platform, cloud.gov
Pages, is now fully authorized by
FedRAMP® at the Moderate impact level, and
is replacing the Federalist offering, formerly at
https://federalist.18f.gov. As part of that migration, we are
publishing the Control Implementation Summary (CIS) + Customer Responsibility Matrix (CRM) + Control-by-Control Inheritance (.xlsx).
The CRM is a summary of each Low security control and whether it
is handled by cloud.gov, a shared responsibility, or a customer
responsibility. It includes guidance on which controls a customer
system can fully or partially inherit from cloud.gov Pages.

We will release a CRM for the cloud.gov Pages Moderate impact controls in the near future. Updates to the cloud.gov Pages CRM will
be reflected on our FedRAMP Tracker page

Suggest edits