# AGU-USE-NPC — Notify Provider of Concerns

> FedRAMP Consolidated Rules for 2026 v2026.07.14.01 · updated 2026-07-14
> Canonical page: /requirement/agu-use-npc

Agency Use of FedRAMP Certified Cloud Services (`AGU`) · group all · subset USE
Force: SHOULD

## Statement

Agencies SHOULD formally notify the cloud service provider if information presented in an Ongoing Certification Report, Quarterly Review, or other FedRAMP Certification Data causes significant concerns for the authorizing official that would likely result in rescission of their Authorization to Operate.

## Who it binds

- Agencies

## Certification classes

_Applies regardless of certification class._

## Which certifications it binds

Certification type: 20x, Rev5
Path: Program, Agency

## Machine-readable form

_This requirement names no JSON schema. FRC-CSO-JSN binds a provider to a schema only where a rule contains one._

## Artifacts

_No requirement-specific artifact is named._

## Timeframes

_This requirement states no deadline._

## Notifications

- {"requirementId":"AGU-USE-NPC","documentKey":"AGU","requirementName":"Notify Provider of Concerns","party":"Provider","method":"varies","target":"varies by provider","name":"The provider's security contact email or form."}