Certification Classes A/B/C/D
FedRAMP 20x expresses package baselines as Certification and Classes A–D. During the transition through 31 December 2026, Class B (Low), Class C (Moderate), and Class D (High) are paired with the earlier impact labels; Class A is a pilot. Class D remains proposal-stage. Certification does not replace an agency ATO.
Educational resource only. scm.cc is not a FedRAMP Recognized Independent Assessor (3PAO) and is not FedRAMP-authorized; it grants no authorization, certification, or assessment outcome. FedRAMP.gov is the authoritative source. This is not legal advice.
Technical detail
Class markers on KSIs come only from the pinned CR26 catalog. Empty class arrays mean unmarked, not 'applies to all classes'.
How to implement
Compare classes in the table below, then open the Class Finder tool page (or the public /quiz) as a pointer — not a certification decision.
Class comparison
| Class | Status | Impact pairing (transition) |
|---|---|---|
| Class A | pilot | Not paired to Low/Moderate/High. Pilot; KSI applicability is unmarked in the CR26 catalog. |
| Class B | in transition | Low, during the transition through 31 December 2026. |
| Class C | in transition | Moderate, during the transition through 31 December 2026. |
| Class D | proposal-stage | High is the pairing used in current guides during transition; the class itself remains proposal-stage (RFC-0033 as of 2026-09). |
Which class applies is not a score scm.cc assigns. Start with the Class Finder (in progress) or the public framework quiz, then verify on FedRAMP.gov.
Questions teams ask
- Does Class C equal Moderate?
- During the 2026 transition, Class C is paired with Moderate. Confirm the current pairing on FedRAMP.gov; it is not a permanent identity.
- Is Class D available?
- Class D is proposal-stage as of 2026-09. Do not treat it as a finished class.
- Which class applies to my offering?
- scm.cc does not assign a class. Use the Class Finder when it ships, or the public framework quiz, then verify on FedRAMP.gov.
Related hub pages
Primary sources
- FedRAMP Certification reference (classes, KSI metrics window) (retrieved 2026-09-27)
- FedRAMP 20x overview & Core Principles (retrieved 2026-09-27)
- FedRAMP 20x Key Security Indicators (CR26) (retrieved 2026-09-27)
Last verified 2026-09-27. FedRAMP.gov is authoritative.