Skip to main content

Recently Updated Pages

Appendix D: User Guide

Legacy FedRAMP System Security Plan (SSP) Appendices A - Q

This needs work that may have been completed elsewhere and nees to be moved into here. This ...

Updated 5 months ago by Brian Ruf

Appendix F: Rules of Behavior (RoB)

Legacy FedRAMP System Security Plan (SSP) Appendices A - Q

This needs work that may have been completed elsewhere and nees to be moved into here. This ...

Updated 5 months ago by Brian Ruf

Appendix G: Information System Contingency Plan (ISCP)

Legacy FedRAMP System Security Plan (SSP) Appendices A - Q

This needs work that may have been completed elsewhere and nees to be moved into here. This ...

Updated 5 months ago by Brian Ruf

Appendix H: Configuration Management Plan (CMP)

Legacy FedRAMP System Security Plan (SSP) Appendices A - Q

This needs work that may have been completed elsewhere and nees to be moved into here. This ...

Updated 5 months ago by Brian Ruf

Appendix I: Incident Response Plan (IRP)

Legacy FedRAMP System Security Plan (SSP) Appendices A - Q

This needs work that may have been completed elsewhere and nees to be moved into here. This ...

Updated 5 months ago by Brian Ruf

Appendix N: Continuous Monitoring Plan

Legacy FedRAMP System Security Plan (SSP) Appendices A - Q

This needs work that may have been completed elsewhere and nees to be moved into here. This ...

Updated 5 months ago by Brian Ruf

Appendix P: Supply Chain Risk Management Plan (SCRMP)

Legacy FedRAMP System Security Plan (SSP) Appendices A - Q

This needs work that may have been completed elsewhere and nees to be moved into here. This ...

Updated 5 months ago by Brian Ruf

Character Encoding

Core Requirements

UTF-8 Character Encoding OSCAL uses UTF-8 character encoding. JSON and YAML files are always UTF-...

Updated 5 months ago by Brian Ruf

Baselines

Supporting Resources and Valid Content

FedRAMP's baselines are available in OSCAL XML, JSON and YAML formats on the OSCAL Foundation's f...

Updated 5 months ago by Erik Cass

Appendix L: CSO-Specific Required Laws and Regulations

Legacy FedRAMP System Security Plan (SSP) Appendices A - Q

Needs Work Content cleanup YAML Example For MVP: attach a Word or PDF document enumerating t...

Updated 6 months ago by Brian Ruf

Appendix J: CIS and CRM Workbook

Legacy FedRAMP System Security Plan (SSP) Appendices A - Q

The FedRAMP Control Information Summary (CIS) and Customer Responsibility Matrix (CRM) are derive...

Updated 6 months ago by Brian Ruf

6. Leveraged FedRAMP-Authorized Services

Legacy FedRAMP System Security Plan (SSP) Sections 1 - 11

The leveraged FedRAMP-Authorized services table is used to list both underlying leveraged authori...

Updated 6 months ago by Brian Ruf

Appendix K: FIPS-199 Worksheet

Legacy FedRAMP System Security Plan (SSP) Appendices A - Q

The system's overall FIPS-199 impact level is determined primarily by the sensitivity of the info...

Updated 6 months ago by Brian Ruf

Appendix E: Digital Identity Level (DIL) Determination

Legacy FedRAMP System Security Plan (SSP) Appendices A - Q

The Digital Identity Level (DIL) is represented on the page below. Within system-characteristics...

Updated 6 months ago by Brian Ruf

Revision History

FedRAMP Common

Document Revision History The OSCAL revision history requires one FedRAMP extension to meet FedRA...

Updated 6 months ago by Erik Cass

Required Metadata

Core Requirements

All OSCAL artifacts must have the following content in metadata: title: The artifact's title las...

Updated 6 months ago by Brian Ruf

Required Root Information

Core Requirements

Core OSCAL requires somne content to be present all OSCAL artifacts. This is crtical to consisten...

Updated 6 months ago by Brian Ruf

10. Cryptographic Modules Implemented for DAR and DIT

Legacy FedRAMP System Security Plan (SSP) Sections 1 - 11

This is address in Appendix Q: Cryptographic Modules.

Updated 6 months ago by Brian Ruf

2. Purpose

Legacy FedRAMP System Security Plan (SSP) Sections 1 - 11

This entire chapter is FedRAMP PMO boilerplate and does not need to be represented in OSCAL conte...

Updated 6 months ago by Brian Ruf

1. Introduction

Legacy FedRAMP System Security Plan (SSP) Sections 1 - 11

This entire chapter is FedRAMP PMO boilerplate and does not need to be represented in OSCAL conte...

Updated 6 months ago by Brian Ruf