CASE STUDY · FEDRAMP

FedRAMP 20x Case Study

Going First, Together: How InfusionPoints and Fortreum Piloted FedRAMP 20x

When FedRAMP 20x launched, there was no established path and no one who had already been through Moderate to share notes. See how two round-one early adopters piloted both cohorts, and what it takes to certify on the new model.

fedramp-20x-case-study-bordered

FedRAMP 20x is the biggest change to federal cloud authorization in a decade: continuous, machine-readable evidence in place of point-in-time document review. But being early means going where there's no playbook yet.

InfusionPoints went all-in as a round-one adopter, with Fortreum as the 3PAO alongside them. Together they piloted both Class B (Low) and Class C (Moderate) on the InfusionPoints XBU40 platform in AWS GovCloud, helping prove the 20x program itself.

Inside the case study:

  • What pioneering 20x actually looked like, phase by phase

  • How an engineering-led assessment of machine-readable evidence differs from traditional document review
  • What the collaboration surfaced, and how it produced a more durable platform
  • The numbers behind a fully successful 20x journey

"They were the ideal partner to help us pilot both Phase I and Phase II of FedRAMP 20x, and we look forward to continuing our collaboration on modernizing Federal cybersecurity."

Jason Shropshire, COO, InfusionPoints

Talk to a Compliance Expert

Thanks for your interest. Considering the 20x path yourself? Reach out to learn how a collaborative path to certification can work for you.