20x Hot Tip of the day, no NDAs for Trust Center access

[emu-gov]

Happy Thursday y'all!

We are working our way through a number of Class A submissions and something we keep running into is the agreement/acknowledgement/signing of NDAs to obtain Trust Center access.

UPDATED: All Federal employees and FedRAMP staff are restricted by existing government law and policy from taking any inappropriate action with provided Certification information and do not need to be covered by a company-specific NDA. No company should expect Federal employees and FedRAMP staff to agree to terms and conditions or an NDA to perform review; if a company is unwilling or unable to share information without an NDA in place then Federal employees and FedRAMP staff will be unable to review the information required for certification.

We will get this language into an existing Rule under the CDS Ruleset next week.