---
tags:
  - 20x
  - Key Security Indicators
---

<span class="picto">:lucide-computer:{ .machine title="This content is machine-generated from FedRAMP Machine-Readable Rules." }</span>

# Key Security Indicators





## Cybersecurity Education {#cybersecurity-education}

### Reviewing All Training

??? abstract "KSI-CED-RAT"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The effectiveness of relevant cybersecurity education and training is persistently reviewed, including at least general training for all employees, role-specific training for employees in high risk roles, training for development and engineering staff on secure software delivery, and training for staff involved with incident response or disaster recovery.



    **Related SP 800-53 Controls:** [CP-03](../../controls/contingency-planning.md#cp-03){ data-preview }, [IR-02](../../controls/incident-response.md#ir-02){ data-preview }, [PS-06](../../controls/personnel-security.md#ps-06){ data-preview }, [AT-02](../../controls/awareness-and-training.md#at-02){ data-preview }, [AT-02 (02)](../../controls/awareness-and-training.md#at-02-02){ data-preview }, [AT-02 (03)](../../controls/awareness-and-training.md#at-02-03){ data-preview }, [AT-03 (05)](../../controls/awareness-and-training.md#at-03-05){ data-preview }, [AT-04](../../controls/awareness-and-training.md#at-04){ data-preview }, [IR-02 (03)](../../controls/incident-response.md#ir-02-03){ data-preview }, [AT-03](../../controls/awareness-and-training.md#at-03){ data-preview }, [SR-11 (01)](../../controls/supply-chain-risk-management.md#sr-11-01){ data-preview }

    ---
    **Terms:** [Incident](../../../definitions/#incident){ data-preview }, [Persistently](../../../definitions/#persistently){ data-preview }, [Vulnerability Response](../../../definitions/#vulnerability-response){ data-preview }
## Change Management {#change-management}

### Logging Changes

??? abstract "KSI-CMT-LMC"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Modifications to the cloud service offering are logged and monitored.



    **Related SP 800-53 Controls:** [AU-02](../../controls/audit-and-accountability.md#au-02){ data-preview }, [CM-03](../../controls/configuration-management.md#cm-03){ data-preview }, [CM-03 (02)](../../controls/configuration-management.md#cm-03-02){ data-preview }, [CM-04 (02)](../../controls/configuration-management.md#cm-04-02){ data-preview }, [CM-06](../../controls/configuration-management.md#cm-06){ data-preview }, [CM-08 (03)](../../controls/configuration-management.md#cm-08-03){ data-preview }, [MA-02](../../controls/maintenance.md#ma-02){ data-preview }

    ---
    **Terms:** [Cloud Service Offering](../../../definitions/#cloud-service-offering){ data-preview }
## Cloud Native Architecture {#cloud-native-architecture}

### Restricting Network Traffic

??? abstract "KSI-CNA-RNT"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Machine-based information resources are persistently reviewed to ensure they are appropriately configured to limit inbound and outbound network traffic.



    **Related SP 800-53 Controls:** [AC-17 (03)](../../controls/access-control.md#ac-17-03){ data-preview }, [CA-09](../../controls/assessment-authorization-and-monitoring.md#ca-09){ data-preview }, [CM-07 (01)](../../controls/configuration-management.md#cm-07-01){ data-preview }, [SC-07 (05)](../../controls/system-and-communications-protection.md#sc-07-05){ data-preview }, [SI-08](../../controls/system-and-information-integrity.md#si-08){ data-preview }

    ---
    **Terms:** [Information Resource](../../../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../../../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../../../definitions/#persistently){ data-preview }
## Identity and Access Management {#identity-and-access-management}

### Automating Account Management

??? abstract "KSI-IAM-AAM"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The lifecycle and privileges of all accounts, roles, and groups are securely managed using automation.



    **Related SP 800-53 Controls:** [AC-02 (02)](../../controls/access-control.md#ac-02-02){ data-preview }, [AC-02 (03)](../../controls/access-control.md#ac-02-03){ data-preview }, [AC-02 (13)](../../controls/access-control.md#ac-02-13){ data-preview }, [AC-06 (07)](../../controls/access-control.md#ac-06-07){ data-preview }, [IA-04 (04)](../../controls/identification-and-authentication.md#ia-04-04){ data-preview }, [IA-12](../../controls/identification-and-authentication.md#ia-12){ data-preview }, [IA-12 (02)](../../controls/identification-and-authentication.md#ia-12-02){ data-preview }, [IA-12 (03)](../../controls/identification-and-authentication.md#ia-12-03){ data-preview }, [IA-12 (05)](../../controls/identification-and-authentication.md#ia-12-05){ data-preview }

### Adopting Passwordless Methods

??? abstract "KSI-IAM-APM"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Secure passwordless methods are used for user authentication and authorization when feasible, otherwise strong passwords with phishing-resistant MFA is used.



    **Related SP 800-53 Controls:** [AC-03](../../controls/access-control.md#ac-03){ data-preview }, [IA-05 (01)](../../controls/identification-and-authentication.md#ia-05-01){ data-preview }, [IA-05 (02)](../../controls/identification-and-authentication.md#ia-05-02){ data-preview }, [IA-05 (06)](../../controls/identification-and-authentication.md#ia-05-06){ data-preview }, [IA-06](../../controls/identification-and-authentication.md#ia-06){ data-preview }, [AC-02](../../controls/access-control.md#ac-02){ data-preview }, [IA-02](../../controls/identification-and-authentication.md#ia-02){ data-preview }, [IA-02 (01)](../../controls/identification-and-authentication.md#ia-02-01){ data-preview }, [IA-02 (02)](../../controls/identification-and-authentication.md#ia-02-02){ data-preview }, [IA-02 (08)](../../controls/identification-and-authentication.md#ia-02-08){ data-preview }, [IA-05](../../controls/identification-and-authentication.md#ia-05){ data-preview }, [IA-08](../../controls/identification-and-authentication.md#ia-08){ data-preview }, [SC-23](../../controls/system-and-communications-protection.md#sc-23){ data-preview }

## Incident Response {#incident-response}

### Reviewing Incident Response Procedures

??? abstract "KSI-INR-RIR"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The effectiveness of documented incident response procedures is persistently reviewed.



    **Related SP 800-53 Controls:** [IR-04](../../controls/incident-response.md#ir-04){ data-preview }, [IR-04 (01)](../../controls/incident-response.md#ir-04-01){ data-preview }, [IR-06](../../controls/incident-response.md#ir-06){ data-preview }, [IR-06 (01)](../../controls/incident-response.md#ir-06-01){ data-preview }, [IR-06 (03)](../../controls/incident-response.md#ir-06-03){ data-preview }, [IR-07](../../controls/incident-response.md#ir-07){ data-preview }, [IR-07 (01)](../../controls/incident-response.md#ir-07-01){ data-preview }, [IR-08](../../controls/incident-response.md#ir-08){ data-preview }, [IR-08 (01)](../../controls/incident-response.md#ir-08-01){ data-preview }, [SI-04 (05)](../../controls/system-and-information-integrity.md#si-04-05){ data-preview }

    ---
    **Terms:** [Incident](../../../definitions/#incident){ data-preview }, [Persistently](../../../definitions/#persistently){ data-preview }, [Vulnerability Response](../../../definitions/#vulnerability-response){ data-preview }
## Service Configuration {#service-configuration}

### Securing Information

??? abstract "KSI-SVC-SIN"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Information is encrypted or otherwise secured from unwanted access or modification.



    **Related SP 800-53 Controls:** [AC-01](../../controls/access-control.md#ac-01){ data-preview }, [AC-17 (02)](../../controls/access-control.md#ac-17-02){ data-preview }, [CP-09 (08)](../../controls/contingency-planning.md#cp-09-08){ data-preview }, [SC-08](../../controls/system-and-communications-protection.md#sc-08){ data-preview }, [SC-08 (01)](../../controls/system-and-communications-protection.md#sc-08-01){ data-preview }, [SC-13](../../controls/system-and-communications-protection.md#sc-13){ data-preview }, [SC-20](../../controls/system-and-communications-protection.md#sc-20){ data-preview }, [SC-21](../../controls/system-and-communications-protection.md#sc-21){ data-preview }, [SC-22](../../controls/system-and-communications-protection.md#sc-22){ data-preview }, [SC-23](../../controls/system-and-communications-protection.md#sc-23){ data-preview }, [SC-28](../../controls/system-and-communications-protection.md#sc-28){ data-preview }, [SC-28 (01)](../../controls/system-and-communications-protection.md#sc-28-01){ data-preview }
