FedRAMP
3PAO
Third-Party Assessment Organization, an independent firm accredited by the American Association for Laboratory Accreditation (A2LA) to perform FedRAMP security assessments. A 3PAO conducts the initial authorization assessment, issues the Security Assessment Report, and performs the annual reassessment that maintains continuous authorization. Cloud service providers cannot self-assess for FedRAMP.