GSA launches pilot to streamline FedRAMP for AI products

The General Services Administration is launching a pilot under its FedRAMP 20x initiatives with the goal of streamlining how artificial intelligence products based in the cloud can move through the certification process.

The pilot will focus on AI-based cloud services that provide access to “conversational AI engines designed for routine and repeated use by federal workers,” GSA said in a release Monday.

AI products that are enterprise-grade and are already available on the GSA schedule are eligible for the pilot.

The pilot will give priority for AI products that meet the following conditions:

• Use enterprise grade single sign on, SCIM identity management, role-based access control, and offer real time analytics.
  
   
• Guarantee data separation and protection; any model information from training on customer data will not leave the customer environment without customer authorization.
  
   
• Must have demand from five CFO Act agencies or be specifically recommended by the CIO Council.
  
   
• Be able to meet the requirements for a FedRAMP 20x authorization within two months of acceptance for prioritization.

GSA Deputy Administrator Stephen Ehikian said the pilot’s goal is to remove barriers that may have prevented some companies from seeking government business.

“If you’re deployed on modern cloud infrastructure and following industry best-practices then FedRAMP 20x is designed for you,” Ehikian said in the release. “In the 20x Phase One pilot, automated validation enables tech companies to rapidly showcase their security posture. This expedited authorization process not only shortens the timeline from months to a few weeks but also delivers a deeper understanding of their security choices.”

The pilot also is intended to support America’s AI Action Plan, which the Trump administration released in July.