FRD-IRS Information Resource

Has the meaning from 44 USC § 3502 (6): "information and related resources, such as personnel, equipment, funds, and information technology." This includes any aspect of the cloud service offering, both technical and managerial, including everything that makes up the business of the offering from non-machine-based information resources like organizational policies, procedures, employees, etc. to machine-based information resources like hardware, software, cloud services, code, etc.

Information resources are either machine-based or non-machine-based; any requirement or recommendation that references information resources without specifying a type is inclusive of all information resources.

Reference: 44 USC § 3502 (6)

Also: information resource, information resources

1. Áttekintés

1.1 Hivatkozások

• AGU-USE-RIR Review All Information Resources
• CPO-CSO-OVR Overview of the Cloud Service Offering
• FRC-CSO-FCP FedRAMP Certification Profile
• FRC-CLA-MFR Mandatory FedRAMP Rules for Class A
• MAS-CSO-IIR Identify Information Resources
• MAS-CSO-FLO Information Flows and Security Categories
• MAS-CSO-TPR Third-Party Information Resources
• MAS-CSO-MDI Metadata Inclusion
• MAS-CSO-SUP Supplemental Information
• MKT-IIP-AGU Agency Use Cases
• VDR-CSO-DET Vulnerability Detection
• VDR-CSO-DAC Detect After Changes
• VDR-CSO-MSP Maintain Security
• VDR-CSO-AKE Avoid KEVs
• VDR-CSO-SIR Sampling
• VDR-TFR-NMV Non-Machine Verification and Validation
• VDR-TFR-PDD Persistent Drift Detection
• VDR-TFR-PCD Persistently Complete Detection
• VDR-TFR-PSD Persistent Sample Detection
• VDR-TFR-MVX Persistent Machine Verification and Validation for 20x
• VDR-TFR-MVF Persistent Machine Verification and Validation for Rev5
• VER-EVA-GRV Group Vulnerabilities
• KSI-CMT-RMV Redeploying vs Modifying
• KSI-CNA-EIS Enforcing Intended State
• KSI-CNA-IBP Implementing Best Practices
• KSI-CNA-MAT Minimizing Attack Surface
• KSI-CNA-OFA Optimizing for Availability
• KSI-CNA-RNT Restricting Network Traffic
• KSI-CNA-RVP Reviewing Protections
• KSI-MLA-EVC Evaluating Configurations
• KSI-MLA-LET Logging Event Types
• KSI-PIY-GIV Generating Inventories
• KSI-RPL-ABO Aligning Backups with Objectives
• KSI-SCR-MON Monitoring Supply Chain Risk
• KSI-SVC-ACM Automating Configuration Management
• KSI-SVC-EIS Evaluating and Improving Security
• KSI-SVC-PRR Preventing Residual Risk
• KSI-SVC-VCM Validating Communications
• KSI-SVC-VRI Validating Resource Integrity

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

3. Kapcsolódó szabályozások

• FedRAMP Consolidated Rules -

  EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.

  DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.