+IVV-CSF-AIA Annual Independent Assessments for Rev5
---+IVV-CSF-AIA Annual Independent Assessments for Rev5 – Class B
---+IVV-CSF-AIA Annual Independent Assessments for Rev5 – Class C
---+IVV-CSF-AIA Annual Independent Assessments for Rev5 – Class D

IVV-CSF-AIA Annual Independent Assessments for Rev5

Class B

Providers with Rev5 Class B Certifications MUST include the following Rev5 Controls in a FedRAMP independent assessment at least once per year:

Timeframe: 1 year

Class C

Providers with Rev5 Class C Certifications MUST include the following Rev5 Controls in a FedRAMP independent assessment at least once per year:

Timeframe: 1 year

Class D

Providers with Rev5 Class D Certifications MUST include the following Rev5 Controls in a FedRAMP independent assessment at least once per year:

Timeframe: 1 year

Defined terms: FedRAMP Independent Assessment

1. Επισκόπηση

IVV-CSF-AIA Annual Independent Assessments for Rev5 – Class B

Providers with Rev5 Class B Certifications MUST include the following Rev5 Controls in a FedRAMP independent assessment at least once per year:

NIST SP 800-53 Rev. 5 controls (35)

  • AC: AC-02, AC-03
  • AU: AU-02, AU-03, AU-04, AU-05, AU-06, AU-08, AU-11, AU-12
  • CA: CA-08
  • CM: CM-05, CM-06, CM-07, CM-08
  • CP: CP-04
  • IA: IA-02, IA-02 (01), IA-02 (02), IA-02 (08), IA-02 (12), IA-04, IA-05
  • IR: IR-04
  • PE: PE-03
  • RA: RA-05, RA-05 (02)
  • SA: SA-09
  • SC: SC-07, SC-08, SC-12, SC-13, SC-21, SC-28
  • SI: SI-03
IVV-CSF-AIA Annual Independent Assessments for Rev5 – Class C

Providers with Rev5 Class C Certifications MUST include the following Rev5 Controls in a FedRAMP independent assessment at least once per year:

NIST SP 800-53 Rev. 5 controls (80)

  • AC: AC-02, AC-02 (01), AC-02 (02), AC-02 (03), AC-02 (04), AC-02 (05), AC-02 (07), AC-02 (09), AC-02 (12), AC-02 (13), AC-03, AC-06, AC-06 (02), AC-06 (05), AC-06 (10), AC-17 (02)
  • AU: AU-02, AU-03, AU-03 (01), AU-04, AU-05, AU-06, AU-06 (01), AU-06 (03), AU-08, AU-11, AU-12
  • CA: CA-08 (01), CA-08 (02)
  • CM: CM-05, CM-06, CM-06 (01), CM-07, CM-07 (01), CM-07 (02), CM-07 (05), CM-08
  • CP: CP-04
  • IA: IA-02, IA-02 (01), IA-02 (02), IA-02 (05), IA-02 (06), IA-02 (08), IA-02 (12), IA-04, IA-05
  • IR: IR-03, IR-04, IR-04 (01)
  • MA: MA-03 (02)
  • PE: PE-03
  • RA: RA-05, RA-05 (02), RA-05 (03)
  • SA: SA-09, SA-11 (01)
  • SC: SC-07, SC-07 (03), SC-07 (04), SC-07 (05), SC-07 (07), SC-07 (08), SC-07 (12), SC-07 (18), SC-08, SC-12, SC-13, SC-21, SC-28, SC-45 (01)
  • SI: SI-03, SI-04 (01), SI-04 (02), SI-04 (16), SI-04 (23), SI-06, SI-07, SI-07 (01), SI-10
IVV-CSF-AIA Annual Independent Assessments for Rev5 – Class D

Providers with Rev5 Class D Certifications MUST include the following Rev5 Controls in a FedRAMP independent assessment at least once per year:

NIST SP 800-53 Rev. 5 controls (101)

  • AC: AC-02, AC-02 (01), AC-02 (02), AC-02 (03), AC-02 (04), AC-02 (05), AC-02 (07), AC-02 (09), AC-02 (11), AC-02 (12), AC-02 (13), AC-03, AC-06, AC-06 (02), AC-06 (03), AC-06 (05), AC-06 (08), AC-06 (10), AC-17 (02)
  • AU: AU-02, AU-03, AU-03 (01), AU-04, AU-05, AU-05 (01), AU-05 (02), AU-06, AU-06 (01), AU-06 (03), AU-06 (04), AU-06 (05), AU-06 (06), AU-06 (07), AU-08, AU-10, AU-11, AU-12, AU-12 (01), AU-12 (03)
  • CA: CA-08 (01), CA-08 (02)
  • CM: CM-05, CM-06, CM-06 (01), CM-06 (02), CM-07, CM-07 (01), CM-07 (02), CM-07 (05), CM-08
  • CP: CP-04
  • IA: IA-02, IA-02 (01), IA-02 (02), IA-02 (05), IA-02 (06), IA-02 (08), IA-02 (12), IA-04, IA-05
  • IR: IR-03, IR-04, IR-04 (01), IR-04 (02), IR-04 (04), IR-04 (06)
  • MA: MA-03 (02)
  • PE: PE-03
  • RA: RA-05, RA-05 (02), RA-05 (03)
  • SA: SA-09, SA-11 (01)
  • SC: SC-07, SC-07 (03), SC-07 (04), SC-07 (05), SC-07 (07), SC-07 (08), SC-07 (12), SC-07 (18), SC-07 (20), SC-07 (21), SC-08, SC-12, SC-13, SC-21, SC-28, SC-45 (01)
  • SI: SI-03, SI-04 (01), SI-04 (02), SI-04 (10), SI-04 (16), SI-04 (19), SI-04 (20), SI-04 (23), SI-06, SI-07, SI-07 (01), SI-10

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί
  • FedRAMP Consolidated Rules -

    EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.

    DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.