u/Logical-Leek-882

Do my reservation system need FedRAMP ATO if it wasn't in RFP

Hi, my company is pursuing an solicitation that requires a end user facing accommodation reservation system. The RFP did not state any FedRAMP requirement but the Q&A mentions that the system must be in a "FedRAMP authorized environment". I'm trying to better understand if that means it just needs to run on FedRAMP certified infrastructure (AWS) or if it means we need an agency ATO?

reddit.com
u/Logical-Leek-882 — 9 days ago