The FedRAMP Board shall create and consistently update necessities and rules for protection authorizations of cloud computing items and services, in step with expectations and rules proven by NIST, to be used inside the resolve of FedRAMP authorizations.[9] For two yrs, FedRAMP will post an yearly strategy in the 2nd quarter of FY 2025 and FY 2026