On September 9, 2026, FedRAMP opened two Requests for Comment that start Phase 4:

• RFC-0033 — 20x Phase 4 Development Tracks for 20x Class D
• RFC-0034 — Technical Advisory Group Changes

Both close October 9, 2026.

This is not a Marketplace listing day. It is the planning window for High. Class B and Class C pipelines opened August 31. Phase 4 is how FedRAMP takes 20x to Class D — the former High baseline — and how it starts writing rules for self-hosted and hybrid-hosted services that Phase 1–3 left behind.

Providers who want a seat in the Class D pilot have one hard gate: a CR26-compliant FedRAMP 20x Class C Certification before December 1, 2026.

Read More

In 2026, organizations pursuing mergers and acquisitions face an increasingly complex threat landscape where cybersecurity gaps can derail deals worth billions. Lazarus Alliance approaches M&A cybersecurity due diligence through seven proprietary risk assessments that integrate technical controls, governance frameworks, and regulatory mapping to deliver actionable intelligence before integration begins.

Read More

In 2026, organizations integrating AI and machine learning into core operations face a critical gap: standard SOC 2 reports no longer suffice for demonstrating control effectiveness over autonomous systems. Lazarus Alliance governance audits address this by extending SOC 2 Trust Services Criteria with AI-specific control layers that map directly to NIST 800-53, ISO 27001, and emerging AI risk frameworks, delivering measurable assurance for CISOs and compliance officers.

Read More