FedRAMP Authorized — Moderate Impact
UKG Pro for Government by UKG. 6 compliance features verified.
UKG Pro for Government
by UKG
Impact Level
Moderate
Status
Authorized
Pricing
mid market
Authorization Date: April 10, 2021 | Sponsoring Agency: GSA
Overview
UKG Pro for Government provides FedRAMP Moderate authorized human capital management with emphasis on payroll, workforce management, and employee experience. It offers comprehensive HR service delivery with AI-powered insights. The platform is known for strong time and attendance capabilities.
Key Features
Certifications & Authorizations
Deployment Options
NIST 800-171 Compliance Coverage
How to Procure UKG Pro for Government for Defense Contracts
UKG Pro for Government is available through GSA Multiple Award Schedule (MAS) under SIN 518210C (IT Professional Services) and SIN 54151S (Software as a Service). Government pricing typically reflects 15-25% discounts from commercial rates with additional volume discounts for enterprise deployments exceeding 5,000 users. The FedRAMP authorization package includes a comprehensive System Security Plan (SSP) documenting the authorization boundary encompassing AWS GovCloud infrastructure, UKG application layers, and third-party integrations. Contracting officers must approve the inherited controls from AWS GovCloud, UKG's continuous monitoring procedures, and any customizations requiring security assessment. The standard procurement timeline spans 90-120 days including security review, contract negotiation, and initial system configuration. For CMMC assessment boundary inclusion, document UKG Pro's role in processing Controlled Unclassified Information (CUI) within HR processes, ensuring the FedRAMP authorization covers all CUI data flows. Integration points with existing identity management systems (Active Directory, PKI) require specific attention during boundary definition. Consider leveraging the DoD Enterprise Software Initiative (ESI) agreement if applicable to your organization.
Compliance Cross-References
UKG Pro for Government's FedRAMP Moderate authorization directly supports DFARS 252.204-7012 compliance by providing adequate security for CUI processing within HR systems, including personnel records and compensation data. The cloud deployment satisfies DFARS 252.239-7010 requirements through AWS GovCloud hosting and FedRAMP continuous monitoring. NIST 800-171 control families are addressed comprehensively: Access Control (AC) through role-based permissions and multi-factor authentication, System and Communications Protection (SC) via FIPS 140-2 encryption and boundary protection, and Audit and Accountability (AU) through comprehensive logging and monitoring capabilities. For CMMC Level 2 compliance, the system supports Access Control, Audit and Accountability, Configuration Management, Identification and Authentication, Media Protection, Personnel Security, Physical Protection, Recovery, Risk Assessment, Security Assessment, System and Communications Protection, and System and Information Integrity domains. The DoD Cloud Computing SRG Impact Level 2 requirements are met through the FedRAMP authorization, providing appropriate controls for DoD Controlled Unclassified Information processing within government HR operations.
Defense Contractor Use Case
Defense contractors use UKG Pro Government for workforce management and time tracking, particularly for employees who work across multiple government contracts requiring accurate labor allocation.
Related Products
More HR & Workforce Products
Frequently Asked Questions
What is the FedRAMP authorization level for UKG Pro for Government?
UKG Pro for Government is authorized at the FedRAMP Moderate impact level, with authorization granted on 2021-04-10 sponsored by GSA. The FedRAMP Moderate baseline includes approximately 325 security controls covering confidentiality, integrity, and availability.
Can defense contractors use UKG Pro for Government for CUI?
UKG Pro for Government is authorized at the FedRAMP Moderate baseline. While FedRAMP Moderate covers a broad range of government data, defense contractors handling CUI should carefully evaluate whether Moderate controls meet their specific DFARS 252.204-7012 and NIST 800-171 requirements. Some CUI categories may require FedRAMP High authorization depending on the sensitivity of the data and contract requirements.
How does UKG Pro for Government pricing compare to commercial?
UKG Pro for Government government pricing is generally competitive with commercial pricing, though the government edition may carry a premium of 10-20% to cover FedRAMP compliance and dedicated infrastructure costs. Mid-market organizations can often access government pricing through GSA Schedule contracts or reseller partners. Contact UKG for a quote tailored to your organization size and requirements.
Browse All FedRAMP Authorized Tools
Search and filter 80+ FedRAMP authorized products for your defense contracting needs.
Open FedRAMP FinderGet a defensible CUI architecture
This UKG Pro for Government FedRAMP profile flags the gaps. The next step is a compliance architecture review where we map your data flows to FedRAMP-authorized alternatives and CMMC-aligned controls.
Schedule architecture reviewRelated: how much CMMC certification costs — DoD’s own priced figures