# CDS-UTC-AAD — Agency Access Denial

> FedRAMP Consolidated Rules for 2026 v2026.07.14.01 · updated 2026-07-14
> Canonical page: /requirement/cds-utc-aad

Certification Data Sharing (`CDS`) · group all · subset UTC
Force: MUST

## Statement

Providers MUST notify FedRAMP within 5 business days of denying an agency access request for FedRAMP Certification Data.

## Who it binds

- Providers

## Certification classes

_Applies regardless of certification class._

## Which certifications it binds

Certification type: 20x, Rev5
Path: Program, Agency

## Machine-readable form

_This requirement names no JSON schema. FRC-CSO-JSN binds a provider to a schema only where a rule contains one._

## Artifacts

_No requirement-specific artifact is named._

## Timeframes

- {"requirementId":"CDS-UTC-AAD","documentKey":"CDS","documentName":"Certification Data Sharing","group":"all","subset":"UTC","name":"Agency Access Denial","statement":"Providers MUST notify FedRAMP within 5 business days of denying an agency access request for FedRAMP Certification Data.","force":"MUST","affects":["Providers"],"class":null,"num":5,"type":"bizdays","sortKey":168}

## Notifications

- {"requirementId":"CDS-UTC-AAD","documentKey":"CDS","requirementName":"Agency Access Denial","party":"FedRAMP","method":"form","target":"https://help.fedramp.gov/hc/en-us/requests/new?ticket_form_id=51829826617243","name":"[CSP] Agency Access Denial"}