SDR-CSF-CTF Rev5 Controls

Providers MUST also include short and simple high-level summaries of at least the following for each applicable Rev5 Control:

• Any organization-defined parameter values.
• Implementation status, one of Implemented, Partially Implemented, Planned, Alternative Implementation, or Not Applicable.
• The mechanisms or activities that address the control, including inheritance from another cloud service offering if applicable.
• The verification that is in place to ensure the implementation is appropriate for the control.
• The validation that is in place to ensure the implementation is working as intended.
• Independent verification.
• Independent validation.
• Any responses or clarifications to the comments in the independent verification or validation.
• Control-specific artifacts (if applicable).

Defined terms: Artifacts, Cloud Service Offering, Validation, Verification

1. Apžvalga

1.1 Nuorodos

• FRD-ART Artifacts
• FRD-CSO Cloud Service Offering
• FRD-VLN Validation
• FRD-VRF Verification

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

3. Susiję teisės aktai

• FedRAMP Consolidated Rules -

  EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.

  DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.