# IVV-CSO-FIA — FedRAMP Independent Assessments

> FedRAMP Consolidated Rules for 2026 v2026.07.14.01 · updated 2026-07-14
> Canonical page: /requirement/ivv-cso-fia

Independent Verification and Validation (`IVV`) · group all · subset CSO
Force: none stated

## Statement

_No statement text is recorded for this requirement._

## Who it binds

- Providers

## Certification classes

- class A
- class B
- class C
- class D

## Which certifications it binds

Certification type: 20x, Rev5
Path: Program, Agency

## Machine-readable form

_This requirement names no JSON schema. FRC-CSO-JSN binds a provider to a schema only where a rule contains one._

## Artifacts

_No requirement-specific artifact is named._

## Timeframes

- {"requirementId":"IVV-CSO-FIA","documentKey":"IVV","documentName":"Independent Verification and Validation","group":"all","subset":"CSO","name":"FedRAMP Independent Assessments","statement":"Providers with Class A Certifications MAY persistently complete an independent verification and validation assessment of all applicable FedRAMP rules with a FedRAMP Recognized independent assessment service OR FedRAMP at least once per year; this is a FedRAMP independent assessment.","force":"MAY","affects":["Providers"],"class":"a","num":1,"type":"years","sortKey":8766}
- {"requirementId":"IVV-CSO-FIA","documentKey":"IVV","documentName":"Independent Verification and Validation","group":"all","subset":"CSO","name":"FedRAMP Independent Assessments","statement":"Providers with Class B Certifications MUST persistently complete an independent verification and validation assessment of all applicable FedRAMP rules with a FedRAMP Recognized independent assessment service OR FedRAMP at least once per year; this is a FedRAMP independent assessment.","force":"MUST","affects":["Providers"],"class":"b","num":1,"type":"years","sortKey":8766}
- {"requirementId":"IVV-CSO-FIA","documentKey":"IVV","documentName":"Independent Verification and Validation","group":"all","subset":"CSO","name":"FedRAMP Independent Assessments","statement":"Providers with Class C Certifications MUST persistently complete an independent verification and validation assessment of all applicable FedRAMP rules with a FedRAMP Recognized independent assessment service OR FedRAMP at least once per year; this is a FedRAMP independent assessment.","force":"MUST","affects":["Providers"],"class":"c","num":1,"type":"years","sortKey":8766}
- {"requirementId":"IVV-CSO-FIA","documentKey":"IVV","documentName":"Independent Verification and Validation","group":"all","subset":"CSO","name":"FedRAMP Independent Assessments","statement":"Providers with Class D Certifications MUST persistently complete an independent verification and validation assessment of all applicable FedRAMP rules with a FedRAMP Recognized independent assessment service OR FedRAMP at least once per year; this is a FedRAMP independent assessment.","force":"MUST","affects":["Providers"],"class":"d","num":1,"type":"years","sortKey":8766}

## Notifications

_This requirement demands no notification._