Government / NIST
Available nowFedRAMP 20x · Consolidated Rules for 2026
The Key Security Indicators a cloud service provider demonstrates for a FedRAMP 20x certification, grouped into FedRAMP’s indicator families.
25+
requirements tracked
Premium
Access
On Pro and Enterprise, or as one of Starter’s framework slots
Scope
How much of the standard Keel models
Keel authors every leaf requirement in the scope declared below, with nothing inside that scope left out. A test fails the build if the authored count and the declared count ever diverge, so this framework cannot quietly lose requirements after the fact.
- Authored in Keel
- 25+ requirements
- In Keel’s scored scope
- 25+ leaf requirements
Keel publishes this for every framework it ships, complete or not, so a readiness percentage can be read against a denominator you can see. Compare every framework
What Keel does
How Keel helps with FedRAMP 20x
- Track FedRAMP 20x as a control set with a live readiness score
- Crosswalked to your other frameworks, so shared controls are evidenced once
- Collect evidence in one place and reuse it everywhere
Collect once, comply everywhere
FedRAMP 20x shares canonical controls with FedRAMP Rev5 Class C, FedRAMP Rev5 Class D and ISO/IEC 27001 and others in the catalog. Implement one of those controls and it counts toward every framework it satisfies, so adding FedRAMP 20x rarely means starting from scratch.
- ISO/IEC 27001 shares canonical controls
- CIS Critical Security Controls shares canonical controls
- PCI DSS shares canonical controls
- SOC 2 shares canonical controls
- SOX (Sarbanes-Oxley) Section 404 shares canonical controls
- NIST Cybersecurity Framework shares canonical controls
- NIST SP 800-53 shares canonical controls
- FedRAMP Rev5 Class B shares canonical controls
- FedRAMP Rev5 Class C shares canonical controls
- FedRAMP Rev5 Class D shares canonical controls
- FedRAMP Consolidated Rules shares canonical controls
- NIST SP 800-171 shares canonical controls
- HIPAA shares canonical controls
- GDPR shares canonical controls
- COPPA shares canonical controls
- Google Play Families no shared canonical controls
- Amazon Appstore Child-Directed Apps no shared canonical controls
- Apple App Store Kids Category no shared canonical controls
- PIPEDA shares canonical controls
- ISO 9001 shares canonical controls
- AI Governance Essentials no shared canonical controls
- ISO/IEC 42001 shares canonical controls
- NIST AI Risk Management Framework shares canonical controls
- EU AI Act no shared canonical controls
- ESG Essentials shares canonical controls
- US Employment Law - Federal Baseline shares canonical controls
A framework is lit when at least one canonical control satisfies both FedRAMP 20x and that framework. Unlit means none of them do, which is an absence rather than a judgment about that standard.
Crosswalks for FedRAMP 20x: FedRAMP 20x vs CIS Critical Security Controls crosswalk · FedRAMP 20x vs COPPA crosswalk · FedRAMP 20x vs ESG Essentials crosswalk · FedRAMP 20x vs FedRAMP Consolidated Rules crosswalk · FedRAMP 20x vs FedRAMP Rev5 Class B crosswalk · FedRAMP 20x vs FedRAMP Rev5 Class C crosswalk · FedRAMP 20x vs FedRAMP Rev5 Class D crosswalk · FedRAMP 20x vs GDPR crosswalk · FedRAMP 20x vs HIPAA crosswalk · FedRAMP 20x vs ISO 9001 crosswalk · FedRAMP 20x vs ISO/IEC 27001 crosswalk · FedRAMP 20x vs ISO/IEC 42001 crosswalk · FedRAMP 20x vs NIST AI Risk Management Framework crosswalk · FedRAMP 20x vs NIST Cybersecurity Framework crosswalk · FedRAMP 20x vs NIST SP 800-171 crosswalk · FedRAMP 20x vs NIST SP 800-53 crosswalk · FedRAMP 20x vs PCI DSS crosswalk · FedRAMP 20x vs PIPEDA crosswalk · FedRAMP 20x vs SOC 2 crosswalk · FedRAMP 20x vs SOX (Sarbanes-Oxley) Section 404 crosswalk · FedRAMP 20x vs US Employment Law - Federal Baseline crosswalk
Other frameworks: ISO/IEC 27001 · CIS Critical Security Controls · PCI DSS · SOC 2 · SOX (Sarbanes-Oxley) Section 404 · NIST Cybersecurity Framework · All frameworks