FedRAMP 20x in Motion: What Early Results Mean for Federal Agencies

On Demand

FedRAMP 20x introduces a bold rethinking of the Authorization to Operate (ATO) process moving toward a faster, more outcome-driven model.
The traditional ATO process — manual, duplicative and slow — has long been a bottleneck in adopting secure cloud services. With new guidance focused on automation, machine-readable artifacts and outcome-based metrics like Key Security Indicators (KSIs), the program is redefining what it means to assess and authorize cloud systems in the federal space.
Now, several months into implementation, agencies are seeing early signs of impact and starting to ask what it means for their own ATO strategy.
In this timely webinar, experts from the Cloud Security Alliance and RegScale will explore:
- What’s changing in the FedRAMP 20x approach to ATOs and why it matters.
- How KSIs shift agency oversight from static documentation to real-time performance.
- The role of OSCAL, Compliance as Code and automation in continuous authorizations.
- How risk envelopes and other structural reforms could reduce redundancy and rework.
- What agencies should be doing now to prepare for a more agile, data-driven ATO process.
Whether you’re granting initial ATOs or overseeing ongoing compliance, this session will help federal cybersecurity and compliance leaders understand how FedRAMP 20x is modernizing cloud authorizations — and how your agency can lead the shift.
Watch the Webinar
Connect with speakers
-
Dale Hoak
Chief Information Security Officer (CISO)
RegScale
-
Daniele Catteddu
Chief Technology Officer (CTO)
Cloud Security Alliance
More ways to stay up to date
Get insights delivered to your inbox
Receive platform tips, release updates, news and more