+FRC-CSF-BSL FedRAMP Rev5 Baselines
---+FRC-CSF-BSL FedRAMP Rev5 Baselines – Class B
---+FRC-CSF-BSL FedRAMP Rev5 Baselines – Class C
---+FRC-CSF-BSL FedRAMP Rev5 Baselines – Class D
|
FRC-CSF-BSL FedRAMP Rev5 Baselines
Class BProviders seeking FedRAMP Rev5 Class B Certification MUST include at least the following NIST SP 800-53 Rev. 5 controls in their Security Decision Record: Class CProviders seeking FedRAMP Rev5 Class C Certification MUST include at least the following NIST SP 800-53 Rev. 5 controls in their Security Decision Record: Class DProviders seeking FedRAMP Rev5 Class D Certification MUST include at least the following NIST SP 800-53 Rev. 5 controls in their Security Decision Record: Reference: NIST SP 800-53 Rev. 5, Security and Privacy Controls for Information Systems and Organizations Defined terms: Security Decision Record (SDR)
1. Panoramica
| Titolo |
Standard |
|
FRC-CSF-BSL FedRAMP Rev5 Baselines – Class B
|
Providers seeking FedRAMP Rev5 Class B Certification MUST include at least the following NIST SP 800-53 Rev. 5 controls in their Security Decision Record: NIST SP 800-53 Rev. 5 controls (155)- AC: AC-01, AC-02, AC-03, AC-07, AC-08, AC-14, AC-17, AC-18, AC-19, AC-20, AC-22
- AT: AT-01, AT-02, AT-02 (02), AT-03, AT-04
- AU: AU-01, AU-02, AU-03, AU-04, AU-05, AU-06, AU-08, AU-09, AU-11, AU-12
- CA: CA-01, CA-02, CA-02 (01), CA-03, CA-06, CA-07, CA-07 (04), CA-08, CA-09
- CM: CM-01, CM-02, CM-04, CM-05, CM-06, CM-07, CM-08, CM-10, CM-11
- CP: CP-01, CP-02, CP-03, CP-04, CP-09, CP-10
- IA: IA-01, IA-02, IA-02 (01), IA-02 (02), IA-02 (08), IA-02 (12), IA-04, IA-05, IA-05 (01), IA-06, IA-07, IA-08, IA-08 (01), IA-08 (02), IA-08 (04), IA-11
- IR: IR-01, IR-02, IR-04, IR-05, IR-06, IR-07, IR-08
- MA: MA-01, MA-02, MA-04, MA-05
- MP: MP-01, MP-02, MP-06, MP-07
- PE: PE-01, PE-02, PE-03, PE-06, PE-08, PE-12, PE-13, PE-14, PE-15, PE-16
- PL: PL-01, PL-02, PL-04, PL-04 (01), PL-08, PL-10, PL-11
- PS: PS-01, PS-02, PS-03, PS-04, PS-05, PS-06, PS-07, PS-08, PS-09
- RA: RA-01, RA-02, RA-03, RA-03 (01), RA-05, RA-05 (02), RA-05 (11), RA-07
- SA: SA-01, SA-02, SA-03, SA-04, SA-04 (10), SA-05, SA-08, SA-09, SA-22
- SC: SC-01, SC-05, SC-07, SC-08, SC-08 (01), SC-12, SC-13, SC-15, SC-20, SC-21, SC-22, SC-28, SC-28 (01), SC-39
- SI: SI-01, SI-02, SI-03, SI-04, SI-05, SI-12
- SR: SR-01, SR-02, SR-02 (01), SR-03, SR-05, SR-08, SR-10, SR-11, SR-11 (01), SR-11 (02), SR-12
|
|
FRC-CSF-BSL FedRAMP Rev5 Baselines – Class C
|
Providers seeking FedRAMP Rev5 Class C Certification MUST include at least the following NIST SP 800-53 Rev. 5 controls in their Security Decision Record: NIST SP 800-53 Rev. 5 controls (322)- AC: AC-01, AC-02, AC-02 (01), AC-02 (02), AC-02 (03), AC-02 (04), AC-02 (05), AC-02 (07), AC-02 (09), AC-02 (12), AC-02 (13), AC-03, AC-04, AC-04 (21), AC-05, AC-06, AC-06 (01), AC-06 (02), AC-06 (05), AC-06 (07), AC-06 (09), AC-06 (10), AC-07, AC-08, AC-11, AC-11 (01), AC-12, AC-14, AC-17, AC-17 (01), AC-17 (02), AC-17 (03), AC-17 (04), AC-18, AC-18 (01), AC-18 (03), AC-19, AC-19 (05), AC-20, AC-20 (01), AC-20 (02), AC-21, AC-22
- AT: AT-01, AT-02, AT-02 (02), AT-02 (03), AT-03, AT-04
- AU: AU-01, AU-02, AU-03, AU-03 (01), AU-04, AU-05, AU-06, AU-06 (01), AU-06 (03), AU-07, AU-07 (01), AU-08, AU-09, AU-09 (04), AU-11, AU-12
- CA: CA-01, CA-02, CA-02 (01), CA-02 (03), CA-03, CA-06, CA-07, CA-07 (01), CA-07 (04), CA-08, CA-08 (01), CA-08 (02), CA-09
- CM: CM-01, CM-02, CM-02 (02), CM-02 (03), CM-02 (07), CM-03, CM-03 (02), CM-03 (04), CM-04, CM-04 (02), CM-05, CM-05 (01), CM-05 (05), CM-06, CM-06 (01), CM-07, CM-07 (01), CM-07 (02), CM-07 (05), CM-08, CM-08 (01), CM-08 (03), CM-09, CM-10, CM-11, CM-12, CM-12 (01)
- CP: CP-01, CP-02, CP-02 (01), CP-02 (03), CP-02 (08), CP-03, CP-04, CP-04 (01), CP-06, CP-06 (01), CP-06 (03), CP-07, CP-07 (01), CP-07 (02), CP-07 (03), CP-08, CP-08 (01), CP-08 (02), CP-09, CP-09 (01), CP-09 (08), CP-10, CP-10 (02)
- IA: IA-01, IA-02, IA-02 (01), IA-02 (02), IA-02 (05), IA-02 (06), IA-02 (08), IA-02 (12), IA-03, IA-04, IA-04 (04), IA-05, IA-05 (01), IA-05 (02), IA-05 (06), IA-05 (07), IA-06, IA-07, IA-08, IA-08 (01), IA-08 (02), IA-08 (04), IA-11, IA-12, IA-12 (02), IA-12 (03), IA-12 (05)
- IR: IR-01, IR-02, IR-03, IR-03 (02), IR-04, IR-04 (01), IR-05, IR-06, IR-06 (01), IR-06 (03), IR-07, IR-07 (01), IR-08, IR-09, IR-09 (02), IR-09 (03), IR-09 (04)
- MA: MA-01, MA-02, MA-03, MA-03 (01), MA-03 (02), MA-03 (03), MA-04, MA-05, MA-05 (01), MA-06
- MP: MP-01, MP-02, MP-03, MP-04, MP-05, MP-06, MP-07
- PE: PE-01, PE-02, PE-03, PE-04, PE-05, PE-06, PE-06 (01), PE-08, PE-09, PE-10, PE-11, PE-12, PE-13, PE-13 (01), PE-13 (02), PE-14, PE-15, PE-16, PE-17
- PL: PL-01, PL-02, PL-04, PL-04 (01), PL-08, PL-10, PL-11
- PS: PS-01, PS-02, PS-03, PS-03 (03), PS-04, PS-05, PS-06, PS-07, PS-08, PS-09
- RA: RA-01, RA-02, RA-03, RA-03 (01), RA-05, RA-05 (02), RA-05 (03), RA-05 (05), RA-05 (11), RA-07, RA-09
- SA: SA-01, SA-02, SA-03, SA-04, SA-04 (01), SA-04 (02), SA-04 (09), SA-04 (10), SA-05, SA-08, SA-09, SA-09 (01), SA-09 (02), SA-09 (05), SA-10, SA-11, SA-11 (01), SA-11 (02), SA-15, SA-15 (03), SA-22
- SC: SC-01, SC-02, SC-04, SC-05, SC-07, SC-07 (03), SC-07 (04), SC-07 (05), SC-07 (07), SC-07 (08), SC-07 (12), SC-07 (18), SC-08, SC-08 (01), SC-10, SC-12, SC-13, SC-15, SC-17, SC-18, SC-20, SC-21, SC-22, SC-23, SC-28, SC-28 (01), SC-39, SC-45, SC-45 (01)
- SI: SI-01, SI-02, SI-02 (02), SI-02 (03), SI-03, SI-04, SI-04 (01), SI-04 (02), SI-04 (04), SI-04 (05), SI-04 (16), SI-04 (18), SI-04 (23), SI-05, SI-06, SI-07, SI-07 (01), SI-07 (07), SI-08, SI-08 (02), SI-10, SI-11, SI-12, SI-16
- SR: SR-01, SR-02, SR-02 (01), SR-03, SR-05, SR-06, SR-08, SR-10, SR-11, SR-11 (01), SR-11 (02), SR-12
|
|
FRC-CSF-BSL FedRAMP Rev5 Baselines – Class D
|
Providers seeking FedRAMP Rev5 Class D Certification MUST include at least the following NIST SP 800-53 Rev. 5 controls in their Security Decision Record: NIST SP 800-53 Rev. 5 controls (409)- AC: AC-01, AC-02, AC-02 (01), AC-02 (02), AC-02 (03), AC-02 (04), AC-02 (05), AC-02 (07), AC-02 (09), AC-02 (11), AC-02 (12), AC-02 (13), AC-03, AC-04, AC-04 (04), AC-04 (21), AC-05, AC-06, AC-06 (01), AC-06 (02), AC-06 (03), AC-06 (05), AC-06 (07), AC-06 (08), AC-06 (09), AC-06 (10), AC-07, AC-08, AC-10, AC-11, AC-11 (01), AC-12, AC-14, AC-17, AC-17 (01), AC-17 (02), AC-17 (03), AC-17 (04), AC-18, AC-18 (01), AC-18 (03), AC-18 (04), AC-18 (05), AC-19, AC-19 (05), AC-20, AC-20 (01), AC-20 (02), AC-21, AC-22
- AT: AT-01, AT-02, AT-02 (02), AT-02 (03), AT-03, AT-04
- AU: AU-01, AU-02, AU-03, AU-03 (01), AU-04, AU-05, AU-05 (01), AU-05 (02), AU-06, AU-06 (01), AU-06 (03), AU-06 (04), AU-06 (05), AU-06 (06), AU-06 (07), AU-07, AU-07 (01), AU-08, AU-09, AU-09 (02), AU-09 (03), AU-09 (04), AU-10, AU-11, AU-12, AU-12 (01), AU-12 (03)
- CA: CA-01, CA-02, CA-02 (01), CA-02 (02), CA-02 (03), CA-03, CA-03 (06), CA-06, CA-07, CA-07 (01), CA-07 (04), CA-08, CA-08 (01), CA-08 (02), CA-09
- CM: CM-01, CM-02, CM-02 (02), CM-02 (03), CM-02 (07), CM-03, CM-03 (01), CM-03 (02), CM-03 (04), CM-03 (06), CM-04, CM-04 (01), CM-04 (02), CM-05, CM-05 (01), CM-05 (05), CM-06, CM-06 (01), CM-06 (02), CM-07, CM-07 (01), CM-07 (02), CM-07 (05), CM-08, CM-08 (01), CM-08 (02), CM-08 (03), CM-08 (04), CM-09, CM-10, CM-11, CM-12, CM-12 (01), CM-14
- CP: CP-01, CP-02, CP-02 (01), CP-02 (02), CP-02 (03), CP-02 (05), CP-02 (08), CP-03, CP-03 (01), CP-04, CP-04 (01), CP-04 (02), CP-06, CP-06 (01), CP-06 (02), CP-06 (03), CP-07, CP-07 (01), CP-07 (02), CP-07 (03), CP-07 (04), CP-08, CP-08 (01), CP-08 (02), CP-08 (03), CP-08 (04), CP-09, CP-09 (01), CP-09 (02), CP-09 (03), CP-09 (05), CP-09 (08), CP-10, CP-10 (02), CP-10 (04)
- IA: IA-01, IA-02, IA-02 (01), IA-02 (02), IA-02 (05), IA-02 (06), IA-02 (08), IA-02 (12), IA-03, IA-04, IA-04 (04), IA-05, IA-05 (01), IA-05 (02), IA-05 (06), IA-05 (07), IA-05 (08), IA-05 (13), IA-06, IA-07, IA-08, IA-08 (01), IA-08 (02), IA-08 (04), IA-11, IA-12, IA-12 (02), IA-12 (03), IA-12 (04), IA-12 (05)
- IR: IR-01, IR-02, IR-02 (01), IR-02 (02), IR-03, IR-03 (02), IR-04, IR-04 (01), IR-04 (02), IR-04 (04), IR-04 (06), IR-04 (11), IR-05, IR-05 (01), IR-06, IR-06 (01), IR-06 (03), IR-07, IR-07 (01), IR-08, IR-09, IR-09 (02), IR-09 (03), IR-09 (04)
- MA: MA-01, MA-02, MA-02 (02), MA-03, MA-03 (01), MA-03 (02), MA-03 (03), MA-04, MA-04 (03), MA-05, MA-05 (01), MA-06
- MP: MP-01, MP-02, MP-03, MP-04, MP-05, MP-06, MP-06 (01), MP-06 (02), MP-06 (03), MP-07
- PE: PE-01, PE-02, PE-03, PE-03 (01), PE-04, PE-05, PE-06, PE-06 (01), PE-06 (04), PE-08, PE-08 (01), PE-09, PE-10, PE-11, PE-11 (01), PE-12, PE-13, PE-13 (01), PE-13 (02), PE-14, PE-14 (02), PE-15, PE-15 (01), PE-16, PE-17, PE-18
- PL: PL-01, PL-02, PL-04, PL-04 (01), PL-08, PL-10, PL-11
- PS: PS-01, PS-02, PS-03, PS-03 (03), PS-04, PS-04 (02), PS-05, PS-06, PS-07, PS-08, PS-09
- RA: RA-01, RA-02, RA-03, RA-03 (01), RA-05, RA-05 (02), RA-05 (03), RA-05 (04), RA-05 (05), RA-05 (08), RA-05 (11), RA-07, RA-09
- SA: SA-01, SA-02, SA-03, SA-04, SA-04 (01), SA-04 (02), SA-04 (05), SA-04 (09), SA-04 (10), SA-05, SA-08, SA-09, SA-09 (01), SA-09 (02), SA-09 (05), SA-10, SA-11, SA-11 (01), SA-11 (02), SA-15, SA-15 (03), SA-16, SA-17, SA-21, SA-22
- SC: SC-01, SC-02, SC-03, SC-04, SC-05, SC-07, SC-07 (03), SC-07 (04), SC-07 (05), SC-07 (07), SC-07 (08), SC-07 (10), SC-07 (12), SC-07 (18), SC-07 (20), SC-07 (21), SC-08, SC-08 (01), SC-10, SC-12, SC-12 (01), SC-13, SC-15, SC-17, SC-18, SC-20, SC-21, SC-22, SC-23, SC-24, SC-28, SC-28 (01), SC-39, SC-45, SC-45 (01)
- SI: SI-01, SI-02, SI-02 (02), SI-02 (03), SI-03, SI-04, SI-04 (01), SI-04 (02), SI-04 (04), SI-04 (05), SI-04 (10), SI-04 (11), SI-04 (12), SI-04 (14), SI-04 (16), SI-04 (18), SI-04 (19), SI-04 (20), SI-04 (22), SI-04 (23), SI-05, SI-05 (01), SI-06, SI-07, SI-07 (01), SI-07 (02), SI-07 (05), SI-07 (07), SI-07 (15), SI-08, SI-08 (02), SI-10, SI-11, SI-12, SI-16
- SR: SR-01, SR-02, SR-02 (01), SR-03, SR-05, SR-06, SR-08, SR-09, SR-09 (01), SR-10, SR-11, SR-11 (01), SR-11 (02), SR-12
|
1.1 Riferimenti
1.2 Requisiti identificati
1.3 Regolamentazioni correlate
2. Requisiti identificati
Requisiti
| Fonte |
Requisito |
3. Regolamentazioni correlate
Regolamentazioni
| Fonte |
Regolamentazione |
- FedRAMP Consolidated Rules -
EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.
DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.
|