---
title: "20x Class C Ruleset Reference"
description: "This section contains the entire Consolidated Rules for 2026 as a standalone reference for each ruleset."
purpose: "This content allows folks to see the full rules together without them broken apart by stakeholder."
google_doc: ""
tags:
  - 20x
  - Federal Agencies
  - Cloud Service Providers
  - Independent Assessors
  - Advisors
  - FedRAMP
  - Rules
picto:
  source: machine
---

<span class="picto">:lucide-computer:{ .machine title="This content is machine-generated from FedRAMP Machine-Readable Rules." }</span>

# 20x Class C Ruleset Reference

This section of the Consolidated Rules for 2026 contains each complete FedRAMP Ruleset with all related content in a single rule as an overall reference. The individual stakeholder sections of this site contain only the specific rules that apply in different circumstances for different stakeholders, while the reference rulesets are entirely unabridged.

| Acronym | Ruleset | Status | Counts | Most Recently Updated |
| --- | --- | --- | --- | --- |
| AFC | [Addressing FedRAMP Communication](addressing-fedramp-communication.md) | Stable | Subsets: 2<br>Rules: 16 | 2026-06-24 |
| CCM | [Collaborative Continuous Monitoring](collaborative-continuous-monitoring.md) | Stable | Subsets: 3<br>Rules: 19 | 2026-06-24 |
| CDS | [Certification Data Sharing](certification-data-sharing.md) | Stable | Subsets: 3<br>Rules: 20 | 2026-06-24 |
| CMU | [Cryptographic Module Use](cryptographic-module-use.md) | Stable | Subsets: 1<br>Rules: 3 | 2026-06-24 |
| CPO | [Certification Package Overview](certification-package-overview.md) | Stable | Subsets: 2<br>Rules: 4 | 2026-06-25 |
| FRC | [FedRAMP Certification](fedramp-certification.md) | Stable | Subsets: 3<br>Rules: 15 | 2026-06-25 |
| IEC | [Incident Evaluation and Communication](incident-evaluation-and-communication.md) | Stable | Subsets: 2<br>Rules: 8 | 2026-07-02 |
| IVV | [Independent Verification and Validation](independent-verification-and-validation.md) | Stable | Subsets: 3<br>Rules: 16 | 2026-06-24 |
| MAS | [Minimum Assessment Scope](minimum-assessment-scope.md) | Stable | Subsets: 1<br>Rules: 5 | 2026-06-24 |
| MKT | [Marketplace Listing](marketplace-listing.md) | Stable | Subsets: 5<br>Rules: 12 | 2026-06-24 |
| SCG | [Secure Configuration Guide](secure-configuration-guide.md) | Stable | Subsets: 2<br>Rules: 9 | 2026-06-24 |
| SCN | [Significant Change Notification](significant-change-notification.md) | Stable | Subsets: 5<br>Rules: 17 | 2026-06-24 |
| SDR | [Security Decision Record](security-decision-record.md) | Stable | Subsets: 2<br>Rules: 4 | 2026-06-24 |
| VDR | [Vulnerability Detection and Response](vulnerability-detection-and-response.md) | Stable | Subsets: 2<br>Rules: 17 | 2026-07-01 |
| VER | [Vulnerability Evaluation and Reporting](vulnerability-evaluation-and-reporting.md) | Stable | Subsets: 5<br>Rules: 23 | 2026-06-24 |
