---
tags:
  - Federal Agencies
  - Cloud Service Providers
  - Independent Assessors
  - Advisors
  - FedRAMP
  - Rules
title: "Ruleset Reference"
icon: material/information-outline
picto:
  source: person
---

<span class="picto">:lucide-person-standing:{ .person title="This content was written by a human just for this page." }</span>

# Ruleset Reference

This section contains generated reference copies of the FedRAMP Consolidated Rules for 2026. These pages show the rules together as complete rulesets instead of carving them into stakeholder-specific sections for providers, agencies, independent assessors, advisors, or FedRAMP.

---

<div class="grid cards" markdown>

-   :material-dice-d20-outline:{ .xl .middle .stable } **FedRAMP 20x**

    ---

    Review the 20x rulesets by certification class, including the rules and Key Security Indicators that apply to each class.

    [20x Ruleset Reference](20x/index.md){ data-preview }

-   :material-rewind-5:{ .xl .middle .stable } **FedRAMP Rev5**

    ---

    Review the Rev5 rulesets by certification class for services that still need the Rev5 certification approach.

    [Rev5 Ruleset Reference](rev5/index.md){ data-preview }

-   :lucide-book-open-check:{ .xl .middle .machine } **Complete Rulesets**

    ---

    Review each complete consolidated ruleset without filtering by certification type, class, stakeholder, or site section.

    [Complete Ruleset Reference](complete-rulesets/index.md){ data-preview }

</div>

---

## Focus on FedRAMP 20x Class A

FedRAMP 20x Class A is the simplest and fastest way to see the new outcome-focused approach in action. It keeps the reference small, emphasizes the most essential expectations, and makes it easier to understand how 20x uses measurable security outcomes instead of large documentation packages.

<div class="grid cards" markdown>

-   :lucide-sparkles:{ .xl .middle .stable } **Start with Class A**

    ---

    Class A is a great place to start because it shows the core 20x structure with the least extra noise.

    [20x Class A Ruleset Reference](20x/a/index.md){ data-preview }

-   :lucide-list-checks:{ .xl .middle .machine } **See the Class A Indicators**

    ---

    Review the Key Security Indicators that make Class A concrete, measurable, and easier to reason about.

    [20x Class A Key Security Indicators](20x/a/key-security-indicators.md){ data-preview }

</div>
