> Going through FedRAMP yourself requires a staff who is willing to put in a dedicated effort on the compliance paperwork

But couldn’t you say the same for CMMC 2.0, NIST 800-171, RMF, JSIG, STIG, etc?