FedRAMP
FedRAMP Annual Assessment
The yearly 3PAO assessment that re-tests roughly one-third of the cloud service's authorized control baseline, plus all controls flagged as significantly changed since the prior assessment. The annual assessment culminates in an updated Security Assessment Report and is the primary mechanism by which FedRAMP authorization is sustained over the life of the offering.