I am a Cloud Service Provider and Don’t Have an Audit Completed with Pending RFP In this position the first step would be to find a 3PAO to complete a readiness assessment and subsequent audit … Please log in to rate this. 0 people found this helpful. Category: General ← FedRAMP FAQ