Do I need to register?
No. There is no registration. Join the announcement list on the home page if you want to hear when the schedule and viewing links are ready.
What does the announcement list collect?
An email address, used only to announce the workshop. Attending does not require being on it.
Can I attend anonymously?
Yes. You can watch and ask questions without identifying yourself. Participate at whatever level you are comfortable with.
What does it cost?
Nothing for attendees. We want you to show up and benefit without having to deal with procurement / travel / etc.
Will the sessions be recorded?
Yes. Every session will be recorded and posted online for collective use.
What are CR26, VDR, and a CAP?
CR26 is FedRAMP’s Consolidated Rules for 2026. VDR is Vulnerability Detection and Response, the rule set that governs how providers find, evaluate, and fix vulnerabilities. A CAP is a Corrective Action Plan. Per FedRAMP notice NTC-0014, the rules are mandatory December 7, 2026, and certified offerings under a CAP keep certification through March 7, 2027.
Who is this for?
Providers under a CAP, providers who are not, and providers in good shape who want to share. Auditors, advisors, and vendors who serve them are welcome too.
Is this a vendor pitch?
No. Sessions are practitioner-led and focus on strategies and tactics people have actually used. Vendors are invited to present on their solutions. If they can convince you they’ve got the cure for what ails you, more power to them. This is 100% about solutions.
How do I sign up to lead a workshop?
See the speakers page.
How do I sponsor?
See the sponsor section on the home page and write to the address in the footer.
Is this affiliated with FedRAMP or the government?
No. It is an independent initiative led by practitioners.