---
tags:
  - 20x
  - Key Security Indicators
---

<span class="picto">:lucide-computer:{ .machine title="This content is machine-generated from FedRAMP Machine-Readable Rules." }</span>

# Key Security Indicators





## Cybersecurity Education {#cybersecurity-education}

### Reviewing All Training

??? abstract "KSI-CED-RAT"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The effectiveness of relevant cybersecurity education and training is persistently reviewed, including at least general training for all employees, role-specific training for employees in high risk roles, training for development and engineering staff on secure software delivery, and training for staff involved with incident response or disaster recovery.



    **Related SP 800-53 Controls:** [CP-03](controls/contingency-planning.md#cp-03){ data-preview }, [IR-02](controls/incident-response.md#ir-02){ data-preview }, [PS-06](controls/personnel-security.md#ps-06){ data-preview }, [AT-02](controls/awareness-and-training.md#at-02){ data-preview }, [AT-02 (02)](controls/awareness-and-training.md#at-02-02){ data-preview }, [AT-02 (03)](controls/awareness-and-training.md#at-02-03){ data-preview }, [AT-03 (05)](controls/awareness-and-training.md#at-03-05){ data-preview }, [AT-04](controls/awareness-and-training.md#at-04){ data-preview }, [IR-02 (03)](controls/incident-response.md#ir-02-03){ data-preview }, [AT-03](controls/awareness-and-training.md#at-03){ data-preview }, [SR-11 (01)](controls/supply-chain-risk-management.md#sr-11-01){ data-preview }

    ---
    **Terms:** [Incident](../definitions/#incident){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }, [Vulnerability Response](../definitions/#vulnerability-response){ data-preview }
## Change Management {#change-management}

### Logging Changes

??? abstract "KSI-CMT-LMC"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Modifications to the cloud service offering are logged and monitored.



    **Related SP 800-53 Controls:** [AU-02](controls/audit-and-accountability.md#au-02){ data-preview }, [CM-03](controls/configuration-management.md#cm-03){ data-preview }, [CM-03 (02)](controls/configuration-management.md#cm-03-02){ data-preview }, [CM-04 (02)](controls/configuration-management.md#cm-04-02){ data-preview }, [CM-06](controls/configuration-management.md#cm-06){ data-preview }, [CM-08 (03)](controls/configuration-management.md#cm-08-03){ data-preview }, [MA-02](controls/maintenance.md#ma-02){ data-preview }

    ---
    **Terms:** [Cloud Service Offering](../definitions/#cloud-service-offering){ data-preview }
### Redeploying vs Modifying

??? abstract "KSI-CMT-RMV"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Changes to machine-based information resources are executed through the redeployment of version controlled resources rather than direct modification wherever reasonable.



    **Related SP 800-53 Controls:** [CM-02](controls/configuration-management.md#cm-02){ data-preview }, [CM-03](controls/configuration-management.md#cm-03){ data-preview }, [CM-05](controls/configuration-management.md#cm-05){ data-preview }, [CM-06](controls/configuration-management.md#cm-06){ data-preview }, [CM-07](controls/configuration-management.md#cm-07){ data-preview }, [CM-08 (01)](controls/configuration-management.md#cm-08-01){ data-preview }, [SI-03](controls/system-and-information-integrity.md#si-03){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }
### Reviewing Change Procedures

??? abstract "KSI-CMT-RVP"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The effectiveness of documented change management procedures is persistently reviewed.



    **Related SP 800-53 Controls:** [CM-03](controls/configuration-management.md#cm-03){ data-preview }, [CM-03 (02)](controls/configuration-management.md#cm-03-02){ data-preview }, [CM-03 (04)](controls/configuration-management.md#cm-03-04){ data-preview }, [CM-05](controls/configuration-management.md#cm-05){ data-preview }, [CM-07 (01)](controls/configuration-management.md#cm-07-01){ data-preview }, [CM-09](controls/configuration-management.md#cm-09){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Validating Throughout Deployment

??? abstract "KSI-CMT-VTD"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Persistent testing and validation of changes throughout deployment is automated.



    **Related SP 800-53 Controls:** [CM-03](controls/configuration-management.md#cm-03){ data-preview }, [CM-03 (02)](controls/configuration-management.md#cm-03-02){ data-preview }, [CM-04 (02)](controls/configuration-management.md#cm-04-02){ data-preview }, [SI-02](controls/system-and-information-integrity.md#si-02){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }, [Validation](../definitions/#validation){ data-preview }
## Cloud Native Architecture {#cloud-native-architecture}

### Defining Functionality and Privileges

??? abstract "KSI-CNA-DFP"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The functionality and privileges for infrastructure and services are strictly defined.



    **Related SP 800-53 Controls:** [CM-02](controls/configuration-management.md#cm-02){ data-preview }, [SI-03](controls/system-and-information-integrity.md#si-03){ data-preview }

### Enforcing Intended State

??? abstract "KSI-CNA-EIS"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    === "Class B"
        **Optional:** Automated services are used to persistently assess the security of all machine-based information resources and automatically enforce their intended operational state.

    === "Class C"
        Automated services are used to persistently assess the security of all machine-based information resources and automatically enforce their intended operational state.



    **Related SP 800-53 Controls:** [CA-02 (01)](controls/assessment-authorization-and-monitoring.md#ca-02-01){ data-preview }, [CA-07 (01)](controls/assessment-authorization-and-monitoring.md#ca-07-01){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Implementing Best Practices

??? abstract "KSI-CNA-IBP"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The use and configuration of third-party machine-based information resources is persistently compared against the original provider's best practices and guidance.



    **Related SP 800-53 Controls:** [AC-17 (03)](controls/access-control.md#ac-17-03){ data-preview }, [CM-02](controls/configuration-management.md#cm-02){ data-preview }, [PL-10](controls/planning.md#pl-10){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Minimizing Attack Surface

??? abstract "KSI-CNA-MAT"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Machine-based information resources are persistently reviewed to ensure they have a minimal attack surface and that lateral movement is minimized if compromised.



    **Related SP 800-53 Controls:** [AC-17 (03)](controls/access-control.md#ac-17-03){ data-preview }, [AC-18 (01)](controls/access-control.md#ac-18-01){ data-preview }, [AC-18 (03)](controls/access-control.md#ac-18-03){ data-preview }, [AC-20 (01)](controls/access-control.md#ac-20-01){ data-preview }, [CA-09](controls/assessment-authorization-and-monitoring.md#ca-09){ data-preview }, [SC-07 (03)](controls/system-and-communications-protection.md#sc-07-03){ data-preview }, [SC-07 (04)](controls/system-and-communications-protection.md#sc-07-04){ data-preview }, [SC-07 (05)](controls/system-and-communications-protection.md#sc-07-05){ data-preview }, [SC-07 (08)](controls/system-and-communications-protection.md#sc-07-08){ data-preview }, [SC-08](controls/system-and-communications-protection.md#sc-08){ data-preview }, [SC-10](controls/system-and-communications-protection.md#sc-10){ data-preview }, [SI-10](controls/system-and-information-integrity.md#si-10){ data-preview }, [SI-11](controls/system-and-information-integrity.md#si-11){ data-preview }, [SI-16](controls/system-and-information-integrity.md#si-16){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Optimizing for Availability

??? abstract "KSI-CNA-OFA"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Machine-based information resources are persistently reviewed to ensure they are appropriately optimized for high availability and rapid recovery.


    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Restricting Network Traffic

??? abstract "KSI-CNA-RNT"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Machine-based information resources are persistently reviewed to ensure they are appropriately configured to limit inbound and outbound network traffic.



    **Related SP 800-53 Controls:** [AC-17 (03)](controls/access-control.md#ac-17-03){ data-preview }, [CA-09](controls/assessment-authorization-and-monitoring.md#ca-09){ data-preview }, [CM-07 (01)](controls/configuration-management.md#cm-07-01){ data-preview }, [SC-07 (05)](controls/system-and-communications-protection.md#sc-07-05){ data-preview }, [SI-08](controls/system-and-information-integrity.md#si-08){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Reviewing Protections

??? abstract "KSI-CNA-RVP"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The effectiveness of protection against denial of service attacks and other unwanted activity for machine-based information resources is persistently reviewed.



    **Related SP 800-53 Controls:** [SC-05](controls/system-and-communications-protection.md#sc-05){ data-preview }, [SI-08](controls/system-and-information-integrity.md#si-08){ data-preview }, [SI-08 (02)](controls/system-and-information-integrity.md#si-08-02){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Using Logical Networking

??? abstract "KSI-CNA-ULN"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Logical networking and related capabilities are used and persistently reviewed to enforce traffic flow controls.



    **Related SP 800-53 Controls:** [AC-12](controls/access-control.md#ac-12){ data-preview }, [AC-17 (03)](controls/access-control.md#ac-17-03){ data-preview }, [CA-09](controls/assessment-authorization-and-monitoring.md#ca-09){ data-preview }, [SC-04](controls/system-and-communications-protection.md#sc-04){ data-preview }, [SC-07](controls/system-and-communications-protection.md#sc-07){ data-preview }, [SC-07 (07)](controls/system-and-communications-protection.md#sc-07-07){ data-preview }, [SC-08](controls/system-and-communications-protection.md#sc-08){ data-preview }, [SC-10](controls/system-and-communications-protection.md#sc-10){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
## Identity and Access Management {#identity-and-access-management}

### Automating Account Management

??? abstract "KSI-IAM-AAM"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The lifecycle and privileges of all accounts, roles, and groups are securely managed using automation.



    **Related SP 800-53 Controls:** [AC-02 (02)](controls/access-control.md#ac-02-02){ data-preview }, [AC-02 (03)](controls/access-control.md#ac-02-03){ data-preview }, [AC-02 (13)](controls/access-control.md#ac-02-13){ data-preview }, [AC-06 (07)](controls/access-control.md#ac-06-07){ data-preview }, [IA-04 (04)](controls/identification-and-authentication.md#ia-04-04){ data-preview }, [IA-12](controls/identification-and-authentication.md#ia-12){ data-preview }, [IA-12 (02)](controls/identification-and-authentication.md#ia-12-02){ data-preview }, [IA-12 (03)](controls/identification-and-authentication.md#ia-12-03){ data-preview }, [IA-12 (05)](controls/identification-and-authentication.md#ia-12-05){ data-preview }

### Adopting Passwordless Methods

??? abstract "KSI-IAM-APM"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Secure passwordless methods are used for user authentication and authorization when feasible, otherwise strong passwords with phishing-resistant MFA is used.



    **Related SP 800-53 Controls:** [AC-03](controls/access-control.md#ac-03){ data-preview }, [IA-05 (01)](controls/identification-and-authentication.md#ia-05-01){ data-preview }, [IA-05 (02)](controls/identification-and-authentication.md#ia-05-02){ data-preview }, [IA-05 (06)](controls/identification-and-authentication.md#ia-05-06){ data-preview }, [IA-06](controls/identification-and-authentication.md#ia-06){ data-preview }, [AC-02](controls/access-control.md#ac-02){ data-preview }, [IA-02](controls/identification-and-authentication.md#ia-02){ data-preview }, [IA-02 (01)](controls/identification-and-authentication.md#ia-02-01){ data-preview }, [IA-02 (02)](controls/identification-and-authentication.md#ia-02-02){ data-preview }, [IA-02 (08)](controls/identification-and-authentication.md#ia-02-08){ data-preview }, [IA-05](controls/identification-and-authentication.md#ia-05){ data-preview }, [IA-08](controls/identification-and-authentication.md#ia-08){ data-preview }, [SC-23](controls/system-and-communications-protection.md#sc-23){ data-preview }

### Ensuring Least Privilege

??? abstract "KSI-IAM-ELP"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Identity and access management measures are used and persistently reviewed to ensure each user or device can only access the resources they need.



    **Related SP 800-53 Controls:** [AC-02 (05)](controls/access-control.md#ac-02-05){ data-preview }, [AC-02 (06)](controls/access-control.md#ac-02-06){ data-preview }, [AC-03](controls/access-control.md#ac-03){ data-preview }, [AC-04](controls/access-control.md#ac-04){ data-preview }, [AC-06](controls/access-control.md#ac-06){ data-preview }, [AC-12](controls/access-control.md#ac-12){ data-preview }, [AC-14](controls/access-control.md#ac-14){ data-preview }, [AC-17](controls/access-control.md#ac-17){ data-preview }, [AC-17 (01)](controls/access-control.md#ac-17-01){ data-preview }, [AC-17 (02)](controls/access-control.md#ac-17-02){ data-preview }, [AC-17 (03)](controls/access-control.md#ac-17-03){ data-preview }, [AC-20](controls/access-control.md#ac-20){ data-preview }, [AC-20 (01)](controls/access-control.md#ac-20-01){ data-preview }, [CM-02 (07)](controls/configuration-management.md#cm-02-07){ data-preview }, [CM-09](controls/configuration-management.md#cm-09){ data-preview }, [IA-02](controls/identification-and-authentication.md#ia-02){ data-preview }, [IA-03](controls/identification-and-authentication.md#ia-03){ data-preview }, [IA-04](controls/identification-and-authentication.md#ia-04){ data-preview }, [IA-04 (04)](controls/identification-and-authentication.md#ia-04-04){ data-preview }, [IA-05 (02)](controls/identification-and-authentication.md#ia-05-02){ data-preview }, [IA-05 (06)](controls/identification-and-authentication.md#ia-05-06){ data-preview }, [IA-11](controls/identification-and-authentication.md#ia-11){ data-preview }, [PS-02](controls/personnel-security.md#ps-02){ data-preview }, [PS-03](controls/personnel-security.md#ps-03){ data-preview }, [PS-04](controls/personnel-security.md#ps-04){ data-preview }, [PS-05](controls/personnel-security.md#ps-05){ data-preview }, [PS-06](controls/personnel-security.md#ps-06){ data-preview }, [SC-04](controls/system-and-communications-protection.md#sc-04){ data-preview }, [SC-20](controls/system-and-communications-protection.md#sc-20){ data-preview }, [SC-21](controls/system-and-communications-protection.md#sc-21){ data-preview }, [SC-22](controls/system-and-communications-protection.md#sc-22){ data-preview }, [SC-23](controls/system-and-communications-protection.md#sc-23){ data-preview }, [SC-39](controls/system-and-communications-protection.md#sc-39){ data-preview }, [SI-03](controls/system-and-information-integrity.md#si-03){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Authorizing Just-in-Time

??? abstract "KSI-IAM-JIT"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    A least-privileged, role and attribute-based, and just-in-time security authorization model is used and persistently reviewed for all user and non-user accounts and services.



    **Related SP 800-53 Controls:** [AC-02](controls/access-control.md#ac-02){ data-preview }, [AC-02 (01)](controls/access-control.md#ac-02-01){ data-preview }, [AC-02 (02)](controls/access-control.md#ac-02-02){ data-preview }, [AC-02 (03)](controls/access-control.md#ac-02-03){ data-preview }, [AC-02 (04)](controls/access-control.md#ac-02-04){ data-preview }, [AC-02 (06)](controls/access-control.md#ac-02-06){ data-preview }, [AC-03](controls/access-control.md#ac-03){ data-preview }, [AC-04](controls/access-control.md#ac-04){ data-preview }, [AC-05](controls/access-control.md#ac-05){ data-preview }, [AC-06](controls/access-control.md#ac-06){ data-preview }, [AC-06 (01)](controls/access-control.md#ac-06-01){ data-preview }, [AC-06 (02)](controls/access-control.md#ac-06-02){ data-preview }, [AC-06 (05)](controls/access-control.md#ac-06-05){ data-preview }, [AC-06 (07)](controls/access-control.md#ac-06-07){ data-preview }, [AC-06 (09)](controls/access-control.md#ac-06-09){ data-preview }, [AC-06 (10)](controls/access-control.md#ac-06-10){ data-preview }, [AC-07](controls/access-control.md#ac-07){ data-preview }, [AC-20 (01)](controls/access-control.md#ac-20-01){ data-preview }, [AC-17](controls/access-control.md#ac-17){ data-preview }, [AU-09 (04)](controls/audit-and-accountability.md#au-09-04){ data-preview }, [CM-05](controls/configuration-management.md#cm-05){ data-preview }, [CM-07](controls/configuration-management.md#cm-07){ data-preview }, [CM-07 (02)](controls/configuration-management.md#cm-07-02){ data-preview }, [CM-07 (05)](controls/configuration-management.md#cm-07-05){ data-preview }, [CM-09](controls/configuration-management.md#cm-09){ data-preview }, [IA-04](controls/identification-and-authentication.md#ia-04){ data-preview }, [IA-04 (04)](controls/identification-and-authentication.md#ia-04-04){ data-preview }, [IA-07](controls/identification-and-authentication.md#ia-07){ data-preview }, [PS-02](controls/personnel-security.md#ps-02){ data-preview }, [PS-03](controls/personnel-security.md#ps-03){ data-preview }, [PS-04](controls/personnel-security.md#ps-04){ data-preview }, [PS-05](controls/personnel-security.md#ps-05){ data-preview }, [PS-06](controls/personnel-security.md#ps-06){ data-preview }, [PS-09](controls/personnel-security.md#ps-09){ data-preview }, [RA-05 (05)](controls/risk-assessment.md#ra-05-05){ data-preview }, [SC-02](controls/system-and-communications-protection.md#sc-02){ data-preview }, [SC-23](controls/system-and-communications-protection.md#sc-23){ data-preview }, [SC-39](controls/system-and-communications-protection.md#sc-39){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Securing Non-User Authentication

??? abstract "KSI-IAM-SNU"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Appropriately secure authentication methods are used and persistently reviewed for non-user accounts and services.



    **Related SP 800-53 Controls:** [AC-02](controls/access-control.md#ac-02){ data-preview }, [AC-02 (02)](controls/access-control.md#ac-02-02){ data-preview }, [AC-04](controls/access-control.md#ac-04){ data-preview }, [AC-06 (05)](controls/access-control.md#ac-06-05){ data-preview }, [IA-03](controls/identification-and-authentication.md#ia-03){ data-preview }, [IA-05 (02)](controls/identification-and-authentication.md#ia-05-02){ data-preview }, [RA-05 (05)](controls/risk-assessment.md#ra-05-05){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Responding to Suspicious Activity

??? abstract "KSI-IAM-SUS"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Accounts with privileged access are disabled or otherwise secured in response to suspicious activity.



    **Related SP 800-53 Controls:** [AC-02](controls/access-control.md#ac-02){ data-preview }, [AC-02 (01)](controls/access-control.md#ac-02-01){ data-preview }, [AC-02 (03)](controls/access-control.md#ac-02-03){ data-preview }, [AC-02 (13)](controls/access-control.md#ac-02-13){ data-preview }, [AC-07](controls/access-control.md#ac-07){ data-preview }, [PS-04](controls/personnel-security.md#ps-04){ data-preview }, [PS-08](controls/personnel-security.md#ps-08){ data-preview }

    ---
    **Terms:** [Vulnerability Response](../definitions/#vulnerability-response){ data-preview }
## Incident Response {#incident-response}

### Generating After Action Reports

??? abstract "KSI-INR-AAR"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Incident after action reports are generated and lessons learned are persistently incorporated.



    **Related SP 800-53 Controls:** [IR-03](controls/incident-response.md#ir-03){ data-preview }, [IR-04](controls/incident-response.md#ir-04){ data-preview }, [IR-04 (01)](controls/incident-response.md#ir-04-01){ data-preview }, [IR-08](controls/incident-response.md#ir-08){ data-preview }

    ---
    **Terms:** [Incident](../definitions/#incident){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Reviewing Incident Response Procedures

??? abstract "KSI-INR-RIR"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The effectiveness of documented incident response procedures is persistently reviewed.



    **Related SP 800-53 Controls:** [IR-04](controls/incident-response.md#ir-04){ data-preview }, [IR-04 (01)](controls/incident-response.md#ir-04-01){ data-preview }, [IR-06](controls/incident-response.md#ir-06){ data-preview }, [IR-06 (01)](controls/incident-response.md#ir-06-01){ data-preview }, [IR-06 (03)](controls/incident-response.md#ir-06-03){ data-preview }, [IR-07](controls/incident-response.md#ir-07){ data-preview }, [IR-07 (01)](controls/incident-response.md#ir-07-01){ data-preview }, [IR-08](controls/incident-response.md#ir-08){ data-preview }, [IR-08 (01)](controls/incident-response.md#ir-08-01){ data-preview }, [SI-04 (05)](controls/system-and-information-integrity.md#si-04-05){ data-preview }

    ---
    **Terms:** [Incident](../definitions/#incident){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }, [Vulnerability Response](../definitions/#vulnerability-response){ data-preview }
### Reviewing Past Incidents

??? abstract "KSI-INR-RPI"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Past incidents are persistently reviewed for patterns or vulnerabilities that were not previously apparent or identified.



    **Related SP 800-53 Controls:** [IR-03](controls/incident-response.md#ir-03){ data-preview }, [IR-04](controls/incident-response.md#ir-04){ data-preview }, [IR-04 (01)](controls/incident-response.md#ir-04-01){ data-preview }, [IR-05](controls/incident-response.md#ir-05){ data-preview }, [IR-08](controls/incident-response.md#ir-08){ data-preview }

    ---
    **Terms:** [Incident](../definitions/#incident){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }, [Vulnerability](../definitions/#vulnerability){ data-preview }
## Monitoring, Logging, and Auditing {#monitoring-logging-and-auditing}

### Authorizing Log Access

??? abstract "KSI-MLA-ALA"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    === "Class B"
        **Optional:** A least-privileged, role and attribute-based, and just-in-time access authorization model is used and persistently reviewed for access to log data based on organizationally defined data sensitivity.

    === "Class C"
        A least-privileged, role and attribute-based, and just-in-time access authorization model is used and persistently reviewed for access to log data based on organizationally defined data sensitivity.



    **Related SP 800-53 Controls:** [SI-11](controls/system-and-information-integrity.md#si-11){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Evaluating Configurations

??? abstract "KSI-MLA-EVC"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The configuration of machine-based information resources, especially infrastructure as code, is persistently evaluated and tested.



    **Related SP 800-53 Controls:** [CA-07](controls/assessment-authorization-and-monitoring.md#ca-07){ data-preview }, [CM-02](controls/configuration-management.md#cm-02){ data-preview }, [CM-06](controls/configuration-management.md#cm-06){ data-preview }, [SI-07 (07)](controls/system-and-information-integrity.md#si-07-07){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Logging Event Types

??? abstract "KSI-MLA-LET"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    A list of information resources and event types that will be logged, monitored, and audited is maintained and persistently reviewed to ensure these activities occur.



    **Related SP 800-53 Controls:** [AC-02 (04)](controls/access-control.md#ac-02-04){ data-preview }, [AC-06 (09)](controls/access-control.md#ac-06-09){ data-preview }, [AC-17 (01)](controls/access-control.md#ac-17-01){ data-preview }, [AC-20 (01)](controls/access-control.md#ac-20-01){ data-preview }, [AU-02](controls/audit-and-accountability.md#au-02){ data-preview }, [AU-07 (01)](controls/audit-and-accountability.md#au-07-01){ data-preview }, [AU-12](controls/audit-and-accountability.md#au-12){ data-preview }, [SI-04 (04)](controls/system-and-information-integrity.md#si-04-04){ data-preview }, [SI-04 (05)](controls/system-and-information-integrity.md#si-04-05){ data-preview }, [SI-07 (07)](controls/system-and-information-integrity.md#si-07-07){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Operating SIEM Capability

??? abstract "KSI-MLA-OSM"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    A Security Information and Event Management (SIEM) or similar system(s) is used and persistently reviewed for centralized, tamper-resistant logging of events, activities, and changes.



    **Related SP 800-53 Controls:** [AC-17 (01)](controls/access-control.md#ac-17-01){ data-preview }, [AC-20 (01)](controls/access-control.md#ac-20-01){ data-preview }, [AU-02](controls/audit-and-accountability.md#au-02){ data-preview }, [AU-03](controls/audit-and-accountability.md#au-03){ data-preview }, [AU-03 (01)](controls/audit-and-accountability.md#au-03-01){ data-preview }, [AU-04](controls/audit-and-accountability.md#au-04){ data-preview }, [AU-05](controls/audit-and-accountability.md#au-05){ data-preview }, [AU-06 (01)](controls/audit-and-accountability.md#au-06-01){ data-preview }, [AU-06 (03)](controls/audit-and-accountability.md#au-06-03){ data-preview }, [AU-07](controls/audit-and-accountability.md#au-07){ data-preview }, [AU-07 (01)](controls/audit-and-accountability.md#au-07-01){ data-preview }, [AU-08](controls/audit-and-accountability.md#au-08){ data-preview }, [AU-09](controls/audit-and-accountability.md#au-09){ data-preview }, [AU-11](controls/audit-and-accountability.md#au-11){ data-preview }, [IR-04 (01)](controls/incident-response.md#ir-04-01){ data-preview }, [SI-04 (02)](controls/system-and-information-integrity.md#si-04-02){ data-preview }, [SI-04 (04)](controls/system-and-information-integrity.md#si-04-04){ data-preview }, [SI-07 (07)](controls/system-and-information-integrity.md#si-07-07){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Reviewing Logs

??? abstract "KSI-MLA-RVL"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Logs are persistently reviewed and audited.



    **Related SP 800-53 Controls:** [AC-02 (04)](controls/access-control.md#ac-02-04){ data-preview }, [AC-06 (09)](controls/access-control.md#ac-06-09){ data-preview }, [AU-02](controls/audit-and-accountability.md#au-02){ data-preview }, [AU-06](controls/audit-and-accountability.md#au-06){ data-preview }, [AU-06 (01)](controls/audit-and-accountability.md#au-06-01){ data-preview }, [SI-04](controls/system-and-information-integrity.md#si-04){ data-preview }, [SI-04 (04)](controls/system-and-information-integrity.md#si-04-04){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
## Policy and Inventory {#policy-and-inventory}

### Generating Inventories

??? abstract "KSI-PIY-GIV"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Authoritative sources are used to automatically generate real-time inventories of all information resources when needed.



    **Related SP 800-53 Controls:** [CM-02 (02)](controls/configuration-management.md#cm-02-02){ data-preview }, [CM-07 (05)](controls/configuration-management.md#cm-07-05){ data-preview }, [CM-08](controls/configuration-management.md#cm-08){ data-preview }, [CM-08 (01)](controls/configuration-management.md#cm-08-01){ data-preview }, [CM-12](controls/configuration-management.md#cm-12){ data-preview }, [CM-12 (01)](controls/configuration-management.md#cm-12-01){ data-preview }, [CP-02 (08)](controls/contingency-planning.md#cp-02-08){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }
### Reviewing Executive Support

??? abstract "KSI-PIY-RES"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Executive support for achieving the provider's security goals is persistently reviewed and demonstrated.


    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Reviewing Investments in Security

??? abstract "KSI-PIY-RIS"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The effectiveness of the provider's investments in achieving security goals is persistently reviewed.



    **Related SP 800-53 Controls:** [AC-05](controls/access-control.md#ac-05){ data-preview }, [CA-02](controls/assessment-authorization-and-monitoring.md#ca-02){ data-preview }, [CP-02 (01)](controls/contingency-planning.md#cp-02-01){ data-preview }, [CP-04 (01)](controls/contingency-planning.md#cp-04-01){ data-preview }, [IR-03 (02)](controls/incident-response.md#ir-03-02){ data-preview }, [PM-03](controls/program-management.md#pm-03){ data-preview }, [SA-02](controls/system-and-services-acquisition.md#sa-02){ data-preview }, [SA-03](controls/system-and-services-acquisition.md#sa-03){ data-preview }, [SR-02 (01)](controls/supply-chain-risk-management.md#sr-02-01){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Reviewing Security in the SDLC

??? abstract "KSI-PIY-RSD"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The effectiveness of building security and privacy considerations into the Software Development Lifecycle and aligning with CISA Secure By Design principles is persistently reviewed.



    **Related SP 800-53 Controls:** [AC-05](controls/access-control.md#ac-05){ data-preview }, [AU-03 (03)](controls/audit-and-accountability.md#au-03-03){ data-preview }, [CM-03 (04)](controls/configuration-management.md#cm-03-04){ data-preview }, [PL-08](controls/planning.md#pl-08){ data-preview }, [PM-07](controls/program-management.md#pm-07){ data-preview }, [SA-03](controls/system-and-services-acquisition.md#sa-03){ data-preview }, [SA-08](controls/system-and-services-acquisition.md#sa-08){ data-preview }, [SC-04](controls/system-and-communications-protection.md#sc-04){ data-preview }, [SC-18](controls/system-and-communications-protection.md#sc-18){ data-preview }, [SI-10](controls/system-and-information-integrity.md#si-10){ data-preview }, [SI-11](controls/system-and-information-integrity.md#si-11){ data-preview }, [SI-16](controls/system-and-information-integrity.md#si-16){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Reviewing Vulnerability Disclosures

??? abstract "KSI-PIY-RVD"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The effectiveness of the provider's vulnerability disclosure program is persistently reviewed.



    **Related SP 800-53 Controls:** [RA-05 (11)](controls/risk-assessment.md#ra-05-11){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }, [Vulnerability](../definitions/#vulnerability){ data-preview }
## Recovery Planning {#recovery-planning}

### Aligning Backups with Objectives

??? abstract "KSI-RPL-ABO"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The alignment of machine-based information resource backups with defined recovery objectives is persistently reviewed.



    **Related SP 800-53 Controls:** [CM-02 (03)](controls/configuration-management.md#cm-02-03){ data-preview }, [CP-06](controls/contingency-planning.md#cp-06){ data-preview }, [CP-09](controls/contingency-planning.md#cp-09){ data-preview }, [CP-10](controls/contingency-planning.md#cp-10){ data-preview }, [CP-10 (02)](controls/contingency-planning.md#cp-10-02){ data-preview }, [SI-12](controls/system-and-information-integrity.md#si-12){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Aligning Recovery Plan

??? abstract "KSI-RPL-ARP"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The alignment of recovery plans with defined recovery objectives is persistently reviewed.



    **Related SP 800-53 Controls:** [CP-02](controls/contingency-planning.md#cp-02){ data-preview }, [CP-02 (01)](controls/contingency-planning.md#cp-02-01){ data-preview }, [CP-02 (03)](controls/contingency-planning.md#cp-02-03){ data-preview }, [CP-04 (01)](controls/contingency-planning.md#cp-04-01){ data-preview }, [CP-06](controls/contingency-planning.md#cp-06){ data-preview }, [CP-06 (01)](controls/contingency-planning.md#cp-06-01){ data-preview }, [CP-06 (03)](controls/contingency-planning.md#cp-06-03){ data-preview }, [CP-07](controls/contingency-planning.md#cp-07){ data-preview }, [CP-07 (01)](controls/contingency-planning.md#cp-07-01){ data-preview }, [CP-07 (02)](controls/contingency-planning.md#cp-07-02){ data-preview }, [CP-07 (03)](controls/contingency-planning.md#cp-07-03){ data-preview }, [CP-08](controls/contingency-planning.md#cp-08){ data-preview }, [CP-08 (01)](controls/contingency-planning.md#cp-08-01){ data-preview }, [CP-08 (02)](controls/contingency-planning.md#cp-08-02){ data-preview }, [CP-10](controls/contingency-planning.md#cp-10){ data-preview }, [CP-10 (02)](controls/contingency-planning.md#cp-10-02){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Reviewing Recovery Objectives

??? abstract "KSI-RPL-RRO"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The desired Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) are defined and persistently reviewed for alignment with the provider's business needs and capabilities.



    **Related SP 800-53 Controls:** [CP-02 (03)](controls/contingency-planning.md#cp-02-03){ data-preview }, [CP-10](controls/contingency-planning.md#cp-10){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Testing Recovery Capabilities

??? abstract "KSI-RPL-TRC"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The capability to recover from incidents and contingencies aligned with defined recovery objectives is persistently tested.



    **Related SP 800-53 Controls:** [CP-02 (01)](controls/contingency-planning.md#cp-02-01){ data-preview }, [CP-02 (03)](controls/contingency-planning.md#cp-02-03){ data-preview }, [CP-04](controls/contingency-planning.md#cp-04){ data-preview }, [CP-04 (01)](controls/contingency-planning.md#cp-04-01){ data-preview }, [CP-06](controls/contingency-planning.md#cp-06){ data-preview }, [CP-06 (01)](controls/contingency-planning.md#cp-06-01){ data-preview }, [CP-09 (01)](controls/contingency-planning.md#cp-09-01){ data-preview }, [CP-10](controls/contingency-planning.md#cp-10){ data-preview }, [IR-03](controls/incident-response.md#ir-03){ data-preview }, [IR-03 (02)](controls/incident-response.md#ir-03-02){ data-preview }

    ---
    **Terms:** [Incident](../definitions/#incident){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
## Supply Chain Risk {#supply-chain-risk}

### Mitigating Supply Chain Risk

??? abstract "KSI-SCR-MIT"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Persistently identify, review, and mitigate potential supply chain risks.



    **Related SP 800-53 Controls:** [AC-20](controls/access-control.md#ac-20){ data-preview }, [RA-03 (01)](controls/risk-assessment.md#ra-03-01){ data-preview }, [SA-09](controls/system-and-services-acquisition.md#sa-09){ data-preview }, [SA-10](controls/system-and-services-acquisition.md#sa-10){ data-preview }, [SA-11](controls/system-and-services-acquisition.md#sa-11){ data-preview }, [SA-15 (03)](controls/system-and-services-acquisition.md#sa-15-03){ data-preview }, [SA-22](controls/system-and-services-acquisition.md#sa-22){ data-preview }, [SI-07 (01)](controls/system-and-information-integrity.md#si-07-01){ data-preview }, [SR-05](controls/supply-chain-risk-management.md#sr-05){ data-preview }, [SR-06](controls/supply-chain-risk-management.md#sr-06){ data-preview }, [CA-07 (04)](controls/assessment-authorization-and-monitoring.md#ca-07-04){ data-preview }, [SC-18](controls/system-and-communications-protection.md#sc-18){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }
### Monitoring Supply Chain Risk

??? abstract "KSI-SCR-MON"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Third party software information resources are automatically monitored for upstream vulnerabilities using mechanisms that may include contractual notification requirements or active monitoring services.



    **Related SP 800-53 Controls:** [AC-20](controls/access-control.md#ac-20){ data-preview }, [CA-03](controls/assessment-authorization-and-monitoring.md#ca-03){ data-preview }, [IR-06 (03)](controls/incident-response.md#ir-06-03){ data-preview }, [PS-07](controls/personnel-security.md#ps-07){ data-preview }, [RA-05](controls/risk-assessment.md#ra-05){ data-preview }, [SA-09](controls/system-and-services-acquisition.md#sa-09){ data-preview }, [SI-05](controls/system-and-information-integrity.md#si-05){ data-preview }, [SR-05](controls/supply-chain-risk-management.md#sr-05){ data-preview }, [SR-06](controls/supply-chain-risk-management.md#sr-06){ data-preview }, [SR-08](controls/supply-chain-risk-management.md#sr-08){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Vulnerability](../definitions/#vulnerability){ data-preview }
## Service Configuration {#service-configuration}

### Automating Configuration Management

??? abstract "KSI-SVC-ACM"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The configuration of machine-based information resources is managed using automation and persistently reviewed for drift.



    **Related SP 800-53 Controls:** [AC-02 (04)](controls/access-control.md#ac-02-04){ data-preview }, [CM-02](controls/configuration-management.md#cm-02){ data-preview }, [CM-02 (02)](controls/configuration-management.md#cm-02-02){ data-preview }, [CM-02 (03)](controls/configuration-management.md#cm-02-03){ data-preview }, [CM-06](controls/configuration-management.md#cm-06){ data-preview }, [CM-07 (01)](controls/configuration-management.md#cm-07-01){ data-preview }, [PL-09](controls/planning.md#pl-09){ data-preview }, [PL-10](controls/planning.md#pl-10){ data-preview }, [SA-05](controls/system-and-services-acquisition.md#sa-05){ data-preview }, [SI-05](controls/system-and-information-integrity.md#si-05){ data-preview }, [SR-10](controls/supply-chain-risk-management.md#sr-10){ data-preview }

    ---
    **Terms:** [Drift](../definitions/#drift){ data-preview }, [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Automating Secret Management

??? abstract "KSI-SVC-ASM"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Management, protection, and regular rotation of digital keys, certificates, and other secrets is automated and persistently reviewed.



    **Related SP 800-53 Controls:** [AC-17 (02)](controls/access-control.md#ac-17-02){ data-preview }, [IA-05 (02)](controls/identification-and-authentication.md#ia-05-02){ data-preview }, [IA-05 (06)](controls/identification-and-authentication.md#ia-05-06){ data-preview }, [SC-12](controls/system-and-communications-protection.md#sc-12){ data-preview }, [SC-17](controls/system-and-communications-protection.md#sc-17){ data-preview }

    ---
    **Terms:** [Persistently](../definitions/#persistently){ data-preview }, [Regularly](../definitions/#regularly){ data-preview }
### Evaluating and Improving Security

??? abstract "KSI-SVC-EIS"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Information resources are persistently evaluated for opportunities to improve security and those improvements are persistently made.



    **Related SP 800-53 Controls:** [CM-07 (01)](controls/configuration-management.md#cm-07-01){ data-preview }, [CM-12 (01)](controls/configuration-management.md#cm-12-01){ data-preview }, [MA-02](controls/maintenance.md#ma-02){ data-preview }, [PL-08](controls/planning.md#pl-08){ data-preview }, [SC-07](controls/system-and-communications-protection.md#sc-07){ data-preview }, [SC-39](controls/system-and-communications-protection.md#sc-39){ data-preview }, [SI-02 (02)](controls/system-and-information-integrity.md#si-02-02){ data-preview }, [SI-04](controls/system-and-information-integrity.md#si-04){ data-preview }, [SR-10](controls/supply-chain-risk-management.md#sr-10){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Preventing Residual Risk

??? abstract "KSI-SVC-PRR"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    === "Class B"
        **Optional:** Plans, procedures, and the state of information resources are persistently reviewed after making changes to limit and remove unwanted residual elements that would likely negatively affect the confidentiality, integrity, or availability of federal customer data.

    === "Class C"
        Plans, procedures, and the state of information resources are persistently reviewed after making changes to limit and remove unwanted residual elements that would likely negatively affect the confidentiality, integrity, or availability of federal customer data.



    **Related SP 800-53 Controls:** [SC-04](controls/system-and-communications-protection.md#sc-04){ data-preview }

    ---
    **Terms:** [Federal Customer Data](../definitions/#federal-customer-data){ data-preview }, [Information Resource](../definitions/#information-resource){ data-preview }, [Likely](../definitions/#likely){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }
### Removing Unwanted Data

??? abstract "KSI-SVC-RUD"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    === "Class B"
        **Optional:** Unwanted federal customer data is removed promptly when requested by an agency in alignment with customer agreements, including from backups if appropriate; this typically applies when a customer spills information or when a customer seeks to remove information from a service due to a change in usage.

    === "Class C"
        Unwanted federal customer data is removed promptly when requested by an agency in alignment with customer agreements, including from backups if appropriate; this typically applies when a customer spills information or when a customer seeks to remove information from a service due to a change in usage.



    **Related SP 800-53 Controls:** [SI-12 (03)](controls/system-and-information-integrity.md#si-12-03){ data-preview }, [SI-18 (04)](controls/system-and-information-integrity.md#si-18-04){ data-preview }

    ---
    **Terms:** [Federal Customer Data](../definitions/#federal-customer-data){ data-preview }, [Promptly](../definitions/#promptly){ data-preview }
### Securing Information

??? abstract "KSI-SVC-SIN"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Information is encrypted or otherwise secured from unwanted access or modification.



    **Related SP 800-53 Controls:** [AC-01](controls/access-control.md#ac-01){ data-preview }, [AC-17 (02)](controls/access-control.md#ac-17-02){ data-preview }, [CP-09 (08)](controls/contingency-planning.md#cp-09-08){ data-preview }, [SC-08](controls/system-and-communications-protection.md#sc-08){ data-preview }, [SC-08 (01)](controls/system-and-communications-protection.md#sc-08-01){ data-preview }, [SC-13](controls/system-and-communications-protection.md#sc-13){ data-preview }, [SC-20](controls/system-and-communications-protection.md#sc-20){ data-preview }, [SC-21](controls/system-and-communications-protection.md#sc-21){ data-preview }, [SC-22](controls/system-and-communications-protection.md#sc-22){ data-preview }, [SC-23](controls/system-and-communications-protection.md#sc-23){ data-preview }, [SC-28](controls/system-and-communications-protection.md#sc-28){ data-preview }, [SC-28 (01)](controls/system-and-communications-protection.md#sc-28-01){ data-preview }

### Validating Communications

??? abstract "KSI-SVC-VCM"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    === "Class B"
        **Optional:** The authenticity and integrity of communications between machine-based information resources is persistently validated using automation.

    === "Class C"
        The authenticity and integrity of communications between machine-based information resources is persistently validated using automation.



    **Related SP 800-53 Controls:** [SC-23](controls/system-and-communications-protection.md#sc-23){ data-preview }, [SI-07 (01)](controls/system-and-information-integrity.md#si-07-01){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../definitions/#persistently){ data-preview }, [Validation](../definitions/#validation){ data-preview }
### Validating Resource Integrity

??? abstract "KSI-SVC-VRI"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Use cryptographic methods to validate the integrity of machine-based information resources.



    **Related SP 800-53 Controls:** [CM-02 (02)](controls/configuration-management.md#cm-02-02){ data-preview }, [CM-08 (03)](controls/configuration-management.md#cm-08-03){ data-preview }, [SC-13](controls/system-and-communications-protection.md#sc-13){ data-preview }, [SC-23](controls/system-and-communications-protection.md#sc-23){ data-preview }, [SI-07](controls/system-and-information-integrity.md#si-07){ data-preview }, [SI-07 (01)](controls/system-and-information-integrity.md#si-07-01){ data-preview }, [SR-10](controls/supply-chain-risk-management.md#sr-10){ data-preview }

    ---
    **Terms:** [Information Resource](../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../definitions/#machine-based-information-resources){ data-preview }, [Validation](../definitions/#validation){ data-preview }
