# CCM-OCR-AVL — Report Availability

> FedRAMP Consolidated Rules for 2026 v2026.07.14.01 · updated 2026-07-14
> Canonical page: /requirement/ccm-ocr-avl

Collaborative Continuous Monitoring (`CCM`) · group all · subset OCR
Force: MUST

## Statement

Providers MUST supply an Ongoing Certification Report to all necessary parties every 3 months, covering the entire period since the previous summary, in a consistent format that is human readable; this report MUST include high-level summaries of at least the following information:

## Who it binds

- Providers

## Certification classes

_Applies regardless of certification class._

## Which certifications it binds

Certification type: 20x, Rev5
Path: Program, Agency

## Machine-readable form

FedRAMP Ongoing Certification Report (CCM-OCR-AVL) — https://fedramp.gov/schemas/fedramp-ongoing-certification-report-schema-2026-06-24.json

## Artifacts

- {"text":"Most recent Ongoing Certification Report. If the report is not available, the provider MUST provide a sample report that includes all required information.","scope":"all","class":null,"source":"requirement"}
- {"text":"How the report will be delivered","scope":"all","class":null,"source":"requirement"}

## Timeframes

_This requirement states no deadline._

## Notifications

_This requirement demands no notification._