This is correct. The "FedRamp" contract overhaul pretty much locks in the requirements and specifications to these above implementations. I have designed an A

This is correct. The "FedRamp" contract overhaul pretty much locks in the requirements and specifications to these above implementations. I have designed an API that revolves around and side-steps this that currently serves 60 million US civilians...but in the end, the security assessment pretty much comes down to the Privacy Acts interpretations and the common sense security landscape.