{ "profile": { "uuid": "2ef3cdd1-6928-494b-b2ef-593e774fae38", "metadata": { "title": "FedRAMP Rev 5 High Baseline", "published": "2023-08-31T00:00:00Z", "last-modified": "2024-01-11T23:40:17Z", "version": "5.1.1+fedramp-20240111-0", "oscal-version": "1.1.1", "roles": [ { "id": "prepared-by", "title": "Document creator" }, { "id": "fedramp-pmo", "title": "The FedRAMP Program Management Office (PMO)", "short-name": "PMO" }, { "id": "fedramp-jab", "title": "The FedRAMP Joint Authorization Board (JAB)", "short-name": "JAB" } ], "parties": [ { "uuid": "8cc0b8e5-9650-4d5f-9796-316f05fa9a2d", "type": "organization", "name": "Federal Risk and Authorization Management Program: Program Management Office", "short-name": "FedRAMP PMO", "links": [ { "href": "https://fedramp.gov", "rel": "homepage" }, { "href": "#a2381e87-3d04-4108-a30b-b4d2f36d001f", "rel": "logo" }, { "href": "#985475ee-d4d6-4581-8fdf-d84d3d8caa48", "rel": "reference" } ], "email-addresses": [ "info@fedramp.gov" ], "addresses": [ { "type": "work", "addr-lines": [ "1800 F St. NW" ], "city": "Washington", "state": "DC", "postal-code": "20006", "country": "US" } ] }, { "uuid": "ca9ba80e-1342-4bfd-b32a-abac468c24b4", "type": "organization", "name": "Federal Risk and Authorization Management Program: Joint Authorization Board", "short-name": "FedRAMP JAB", "links": [ { "href": "#a2381e87-3d04-4108-a30b-b4d2f36d001f", "rel": "logo" } ] } ], "responsible-parties": [ { "role-id": "prepared-by", "party-uuids": [ "8cc0b8e5-9650-4d5f-9796-316f05fa9a2d" ] }, { "role-id": "fedramp-pmo", "party-uuids": [ "8cc0b8e5-9650-4d5f-9796-316f05fa9a2d" ] }, { "role-id": "fedramp-jab", "party-uuids": [ "ca9ba80e-1342-4bfd-b32a-abac468c24b4" ] } ] }, "imports": [ { "href": "#051a77c1-b61d-4995-8275-dacfe688d510", "include-controls": [ { "with-ids": [ "ac-1", "ac-2", "ac-2.1", "ac-2.2", "ac-2.3", "ac-2.4", "ac-2.5", "ac-2.7", "ac-2.9", "ac-2.11", "ac-2.12", "ac-2.13", "ac-3", "ac-4", "ac-4.4", "ac-4.21", "ac-5", "ac-6", "ac-6.1", "ac-6.2", "ac-6.3", "ac-6.5", "ac-6.7", "ac-6.8", "ac-6.9", "ac-6.10", "ac-7", "ac-8", "ac-10", "ac-11", "ac-11.1", "ac-12", "ac-14", "ac-17", "ac-17.1", "ac-17.2", "ac-17.3", "ac-17.4", "ac-18", "ac-18.1", "ac-18.3", "ac-18.4", "ac-18.5", "ac-19", "ac-19.5", "ac-20", "ac-20.1", "ac-20.2", "ac-21", "ac-22", "at-1", "at-2", "at-2.2", "at-2.3", "at-3", "at-4", "au-1", "au-2", "au-3", "au-3.1", "au-4", "au-5", "au-5.1", "au-5.2", "au-6", "au-6.1", "au-6.3", "au-6.4", "au-6.5", "au-6.6", "au-6.7", "au-7", "au-7.1", "au-8", "au-9", "au-9.2", "au-9.3", "au-9.4", "au-10", "au-11", "au-12", "au-12.1", "au-12.3", "ca-1", "ca-2", "ca-2.1", "ca-2.2", "ca-2.3", "ca-3", "ca-3.6", "ca-5", "ca-6", "ca-7", "ca-7.1", "ca-7.4", "ca-8", "ca-8.1", "ca-8.2", "ca-9", "cm-1", "cm-2", "cm-2.2", "cm-2.3", "cm-2.7", "cm-3", "cm-3.1", "cm-3.2", "cm-3.4", "cm-3.6", "cm-4", "cm-4.1", "cm-4.2", "cm-5", "cm-5.1", "cm-5.5", "cm-6", "cm-6.1", "cm-6.2", "cm-7", "cm-7.1", "cm-7.2", "cm-7.5", "cm-8", "cm-8.1", "cm-8.2", "cm-8.3", "cm-8.4", "cm-9", "cm-10", "cm-11", "cm-12", "cm-12.1", "cm-14", "cp-1", "cp-2", "cp-2.1", "cp-2.2", "cp-2.3", "cp-2.5", "cp-2.8", "cp-3", "cp-3.1", "cp-4", "cp-4.1", "cp-4.2", "cp-6", "cp-6.1", "cp-6.2", "cp-6.3", "cp-7", "cp-7.1", "cp-7.2", "cp-7.3", "cp-7.4", "cp-8", "cp-8.1", "cp-8.2", "cp-8.3", "cp-8.4", "cp-9", "cp-9.1", "cp-9.2", "cp-9.3", "cp-9.5", "cp-9.8", "cp-10", "cp-10.2", "cp-10.4", "ia-1", "ia-2", "ia-2.1", "ia-2.2", "ia-2.5", "ia-2.6", "ia-2.8", "ia-2.12", "ia-3", "ia-4", "ia-4.4", "ia-5", "ia-5.1", "ia-5.2", "ia-5.6", "ia-5.7", "ia-5.8", "ia-5.13", "ia-6", "ia-7", "ia-8", "ia-8.1", "ia-8.2", "ia-8.4", "ia-11", "ia-12", "ia-12.2", "ia-12.3", "ia-12.4", "ia-12.5", "ir-1", "ir-2", "ir-2.1", "ir-2.2", "ir-3", "ir-3.2", "ir-4", "ir-4.1", "ir-4.2", "ir-4.4", "ir-4.6", "ir-4.11", "ir-5", "ir-5.1", "ir-6", "ir-6.1", "ir-6.3", "ir-7", "ir-7.1", "ir-8", "ir-9", "ir-9.2", "ir-9.3", "ir-9.4", "ma-1", "ma-2", "ma-2.2", "ma-3", "ma-3.1", "ma-3.2", "ma-3.3", "ma-4", "ma-4.3", "ma-5", "ma-5.1", "ma-6", "mp-1", "mp-2", "mp-3", "mp-4", "mp-5", "mp-6", "mp-6.1", "mp-6.2", "mp-6.3", "mp-7", "pe-1", "pe-2", "pe-3", "pe-3.1", "pe-4", "pe-5", "pe-6", "pe-6.1", "pe-6.4", "pe-8", "pe-8.1", "pe-9", "pe-10", "pe-11", "pe-11.1", "pe-12", "pe-13", "pe-13.1", "pe-13.2", "pe-14", "pe-14.2", "pe-15", "pe-15.1", "pe-16", "pe-17", "pe-18", "pl-1", "pl-2", "pl-4", "pl-4.1", "pl-8", "pl-10", "pl-11", "ps-1", "ps-2", "ps-3", "ps-3.3", "ps-4", "ps-4.2", "ps-5", "ps-6", "ps-7", "ps-8", "ps-9", "ra-1", "ra-2", "ra-3", "ra-3.1", "ra-5", "ra-5.2", "ra-5.3", "ra-5.4", "ra-5.5", "ra-5.8", "ra-5.11", "ra-7", "ra-9", "sa-1", "sa-2", "sa-3", "sa-4", "sa-4.1", "sa-4.2", "sa-4.5", "sa-4.9", "sa-4.10", "sa-5", "sa-8", "sa-9", "sa-9.1", "sa-9.2", "sa-9.5", "sa-10", "sa-11", "sa-11.1", "sa-11.2", "sa-15", "sa-15.3", "sa-16", "sa-17", "sa-21", "sa-22", "sc-1", "sc-2", "sc-3", "sc-4", "sc-5", "sc-7", "sc-7.3", "sc-7.4", "sc-7.5", "sc-7.7", "sc-7.8", "sc-7.10", "sc-7.12", "sc-7.18", "sc-7.20", "sc-7.21", "sc-8", "sc-8.1", "sc-10", "sc-12", "sc-12.1", "sc-13", "sc-15", "sc-17", "sc-18", "sc-20", "sc-21", "sc-22", "sc-23", "sc-24", "sc-28", "sc-28.1", "sc-39", "sc-45", "sc-45.1", "si-1", "si-2", "si-2.2", "si-2.3", "si-3", "si-4", "si-4.1", "si-4.2", "si-4.4", "si-4.5", "si-4.10", "si-4.11", "si-4.12", "si-4.14", "si-4.16", "si-4.18", "si-4.19", "si-4.20", "si-4.22", "si-4.23", "si-5", "si-5.1", "si-6", "si-7", "si-7.1", "si-7.2", "si-7.5", "si-7.7", "si-7.15", "si-8", "si-8.2", "si-10", "si-11", "si-12", "si-16", "sr-1", "sr-2", "sr-2.1", "sr-3", "sr-5", "sr-6", "sr-8", "sr-9", "sr-9.1", "sr-10", "sr-11", "sr-11.1", "sr-11.2", "sr-12" ] } ] } ], "merge": { "as-is": true }, "modify": { "set-parameters": [ { "param-id": "ac-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ac-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ac-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "ac-02_odp.06", "constraints": [ { "description": "twenty-four (24) hours" } ] }, { "param-id": "ac-02_odp.07", "constraints": [ { "description": "eight (8) hours" } ] }, { "param-id": "ac-02_odp.08", "constraints": [ { "description": "eight (8) hours" } ] }, { "param-id": "ac-02_odp.10", "constraints": [ { "description": "monthly for privileged accessed, every six (6) months for non-privileged access" } ] }, { "param-id": "ac-02.02_odp.01", "constraints": [ { "description": "Selection: disables" } ] }, { "param-id": "ac-02.02_odp.02", "constraints": [ { "description": "no more than 24 hours from last use" } ] }, { "param-id": "ac-02.03_odp.01", "constraints": [ { "description": "24 hours for user accounts" } ] }, { "param-id": "ac-02.03_odp.02", "constraints": [ { "description": "thirty-five (35) days (See additional requirements and guidance.)" } ] }, { "param-id": "ac-02.05_odp", "constraints": [ { "description": "inactivity is anticipated to exceed Fifteen (15) minutes" } ] }, { "param-id": "ac-02.09_odp", "constraints": [ { "description": "organization-defined need with justification statement that explains why such accounts are necessary" } ] }, { "param-id": "ac-02.12_odp.02", "constraints": [ { "description": "at a minimum, the ISSO and/or similar role within the organization" } ] }, { "param-id": "ac-02.13_odp.01", "constraints": [ { "description": "one (1) hour" } ] }, { "param-id": "ac-04.04_odp.01", "constraints": [ { "description": "intrusion detection mechanisms" } ] }, { "param-id": "ac-6.1_prm_2", "constraints": [ { "description": "all functions not publicly accessible" } ] }, { "param-id": "ac-06.01_odp.05", "constraints": [ { "description": "all security-relevant information not publicly available" } ] }, { "param-id": "ac-06.02_odp", "constraints": [ { "description": "all security functions" } ] }, { "param-id": "ac-06.03_odp.01", "constraints": [ { "description": "all privileged commands" } ] }, { "param-id": "ac-06.07_odp.01", "constraints": [ { "description": "at a minimum, annually" } ] }, { "param-id": "ac-06.07_odp.02", "constraints": [ { "description": "all users with privileges" } ] }, { "param-id": "ac-06.08_odp", "constraints": [ { "description": "any software except software explicitly documented" } ] }, { "param-id": "ac-08_odp.01", "constraints": [ { "description": "see additional Requirements and Guidance" } ] }, { "param-id": "ac-08_odp.02", "constraints": [ { "description": "see additional Requirements and Guidance" } ] }, { "param-id": "ac-10_odp.02", "constraints": [ { "description": "three (3) sessions for privileged access and two (2) sessions for non-privileged access" } ] }, { "param-id": "ac-11_odp.02", "constraints": [ { "description": "fifteen (15) minutes" } ] }, { "param-id": "ac-22_odp", "constraints": [ { "description": "at least quarterly" } ] }, { "param-id": "at-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "at-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "at-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "at-2_prm_1", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "at-02_odp.06", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "at-03_odp.03", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "at-03_odp.04", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "at-04_odp", "constraints": [ { "description": "five (5) years or 5 years after completion of a specific training program" } ] }, { "param-id": "au-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "au-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "au-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "au-02_odp.01", "constraints": [ { "description": "successful and unsuccessful account logon events, account management events, object access, policy change, privilege functions, process tracking, and system events. For Web applications: all administrator activity, authentication checks, authorization checks, data deletions, data access, data changes, and permission changes" } ] }, { "param-id": "au-2_prm_2", "constraints": [ { "description": "organization-defined subset of the auditable events defined in AU-2a to be audited continually for each identified event." } ] }, { "param-id": "au-02_odp.04", "constraints": [ { "description": "annually and whenever there is a change in the threat environment" } ] }, { "param-id": "au-03.01_odp", "constraints": [ { "description": "session, connection, transaction, or activity duration; for client-server transactions, the number of bytes received and bytes sent; additional informational messages to diagnose or identify the event; characteristics that describe or identify the object or resource being acted upon; individual identities of group account users; full-text of privileged commands" } ] }, { "param-id": "au-05_odp.03", "constraints": [ { "description": "overwrite oldest record" } ] }, { "param-id": "au-05.01_odp.03", "constraints": [ { "description": "75%, or one month before expected negative impact" } ] }, { "param-id": "au-05.02_odp.01", "constraints": [ { "description": "real-time" } ] }, { "param-id": "au-05.02_odp.02", "constraints": [ { "description": "service provider personnel with authority to address failed audit events" } ] }, { "param-id": "au-05.02_odp.03", "constraints": [ { "description": "audit failure events requiring real-time alerts, as defined by organization audit policy" } ] }, { "param-id": "au-06_odp.01", "constraints": [ { "description": "at least weekly" } ] }, { "param-id": "au-06.05_odp.01", "constraints": [ { "description": "vulnerability scanning information; performance data; information system monitoring information; penetration test data; {{ insert: param, au-06.05_odp.02 }}" } ] }, { "param-id": "au-06.07_odp", "constraints": [ { "description": "information system process; role; user" } ] }, { "param-id": "au-08_odp", "constraints": [ { "description": "one second granularity of time measurement" } ] }, { "param-id": "au-09.02_odp", "constraints": [ { "description": "at least weekly" } ] }, { "param-id": "au-10_odp", "constraints": [ { "description": "minimum actions including the addition, modification, deletion, approval, sending, or receiving of data" } ] }, { "param-id": "au-11_odp", "constraints": [ { "description": "a time period in compliance with M-21-31" } ] }, { "param-id": "au-12_odp.01", "constraints": [ { "description": "all information system and network components where audit capability is deployed/available" } ] }, { "param-id": "au-12.01_odp.01", "constraints": [ { "description": "all network, data storage, and computing devices" } ] }, { "param-id": "au-12.03_odp.01", "constraints": [ { "description": "service provider-defined individuals or roles with audit configuration responsibilities" } ] }, { "param-id": "au-12.03_odp.02", "constraints": [ { "description": "all network, data storage, and computing devices" } ] }, { "param-id": "ca-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ca-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ca-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "ca-02_odp.01", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ca-02_odp.02", "constraints": [ { "description": "individuals or roles to include FedRAMP PMO" } ] }, { "param-id": "ca-02.02_odp.01", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ca-02.03_odp.01", "constraints": [ { "description": "any FedRAMP Accredited 3PAO" } ] }, { "param-id": "ca-02.03_odp.03", "constraints": [ { "description": "the conditions of the JAB/AO in the FedRAMP Repository" } ] }, { "param-id": "ca-03_odp.03", "constraints": [ { "description": "at least annually and on input from JAB/AO" } ] }, { "param-id": "ca-05_odp", "constraints": [ { "description": "at least monthly" } ] }, { "param-id": "ca-06_odp", "constraints": [ { "description": "in accordance with OMB A-130 requirements or when a significant change occurs" } ] }, { "param-id": "ca-7_prm_4", "constraints": [ { "description": "to include JAB/AO" } ] }, { "param-id": "ca-08_odp.01", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ca-09_odp.03", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "cm-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "cm-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "cm-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "cm-02_odp.01", "constraints": [ { "description": "at least annually and when a significant change occurs" } ] }, { "param-id": "cm-02_odp.02", "constraints": [ { "description": "to include when directed by the JAB" } ] }, { "param-id": "cm-02.03_odp", "constraints": [ { "description": "organization-defined number of previous versions of baseline configurations of the previously approved baseline configuration of IS components" } ] }, { "param-id": "cm-03.01_odp.03", "constraints": [ { "description": "organization agreed upon time period" } ] }, { "param-id": "cm-03.01_odp.04", "constraints": [ { "description": "organization defined configuration management approval authorities" } ] }, { "param-id": "cm-03.04_odp.03", "constraints": [ { "description": "Configuration control board (CCB) or similar (as defined in CM-3)" } ] }, { "param-id": "cm-03.06_odp", "constraints": [ { "description": "All security safeguards that rely on cryptography" } ] }, { "param-id": "cm-5.5_prm_1", "constraints": [ { "description": "at least quarterly" } ] }, { "param-id": "cm-07.01_odp.01", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "cm-07.05_odp.02", "constraints": [ { "description": "at least quarterly or when there is a change" } ] }, { "param-id": "cm-08_odp.02", "constraints": [ { "description": "at least monthly" } ] }, { "param-id": "cm-8.3_prm_1", "constraints": [ { "description": "automated mechanisms with a maximum five-minute delay in detection" } ] }, { "param-id": "cm-08.03_odp.04", "constraints": [ { "description": "continuously" } ] }, { "param-id": "cm-08.04_odp", "constraints": [ { "description": "position and role" } ] }, { "param-id": "cm-11_odp.03", "constraints": [ { "description": "Continuously (via CM-7 (5))" } ] }, { "param-id": "cm-12.01_odp.01", "constraints": [ { "description": "Federal data and system data that must be protected at the High or Moderate impact levels" } ] }, { "param-id": "cp-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "cp-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "cp-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "cp-02_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "cp-02.03_odp.01", "constraints": [ { "description": "all" } ] }, { "param-id": "cp-02.03_odp.02", "constraints": [ { "description": "time period defined in service provider and organization SLA" } ] }, { "param-id": "cp-02.05_odp", "constraints": [ { "description": "essential" } ] }, { "param-id": "cp-03_odp.01", "constraints": [ { "description": "\\*See Additional Requirements" } ] }, { "param-id": "cp-03_odp.02", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "cp-03_odp.03", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "cp-04_odp.01", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "cp-4_prm_2", "constraints": [ { "description": "functional exercises" } ] }, { "param-id": "cp-8.4_prm_1", "constraints": [ { "description": "annually" } ] }, { "param-id": "cp-09_odp.02", "constraints": [ { "description": "daily incremental; weekly full" } ] }, { "param-id": "cp-09_odp.03", "constraints": [ { "description": "daily incremental; weekly full" } ] }, { "param-id": "cp-09_odp.04", "constraints": [ { "description": "daily incremental; weekly full" } ] }, { "param-id": "cp-9.1_prm_1", "constraints": [ { "description": "at least monthly" } ] }, { "param-id": "cp-9.5_prm_1", "constraints": [ { "description": "time period and transfer rate consistent with the recovery time and recovery point objectives defined in the service provider and organization SLA." } ] }, { "param-id": "cp-09.08_odp", "constraints": [ { "description": "all backup files" } ] }, { "param-id": "cp-10.04_odp", "constraints": [ { "description": "time period consistent with the restoration time-periods defined in the service provider and organization SLA" } ] }, { "param-id": "ia-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ia-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ia-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "ia-02.06_odp.01", "constraints": [ { "description": "local, network and remote" } ] }, { "param-id": "ia-02.06_odp.02", "constraints": [ { "description": "privileged accounts; non-privileged accounts" } ] }, { "param-id": "ia-02.06_odp.03", "constraints": [ { "description": "FIPS-validated or NSA-approved cryptography" } ] }, { "param-id": "ia-02.08_odp", "constraints": [ { "description": "privileged accounts; non-privileged accounts" } ] }, { "param-id": "ia-04_odp.01", "constraints": [ { "description": "at a minimum, the ISSO (or similar role within the organization)" } ] }, { "param-id": "ia-04_odp.02", "constraints": [ { "description": "at least two (2) years" } ] }, { "param-id": "ia-04.04_odp", "constraints": [ { "description": "contractors; foreign nationals" } ] }, { "param-id": "ia-05.08_odp", "constraints": [ { "description": "different authenticators in different user authentication domains" } ] }, { "param-id": "ir-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ir-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ir-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "ir-02_odp.01", "constraints": [ { "description": "ten (10) days for privileged users, thirty (30) days for Incident Response roles" } ] }, { "param-id": "ir-02_odp.02", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ir-02_odp.03", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ir-03_odp.01", "constraints": [ { "description": "at least every six (6) months, including functional at least annually" } ] }, { "param-id": "ir-04.02_odp.02", "constraints": [ { "description": "all network, data storage, and computing devices" } ] }, { "param-id": "ir-06_odp.01", "constraints": [ { "description": "US-CERT incident reporting timelines as specified in NIST Special Publication 800-61 (as amended)" } ] }, { "param-id": "ir-08_odp.02", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ir-08_odp.04", "constraints": [ { "description": "see additional FedRAMP Requirements and Guidance" } ] }, { "param-id": "ir-8_prm_5", "constraints": [ { "description": "see additional FedRAMP Requirements and Guidance" } ] }, { "param-id": "ir-09.02_odp", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ma-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ma-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ma-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "ma-03_odp", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ma-03.03_odp", "constraints": [ { "description": "the information owner" } ] }, { "param-id": "ma-06_odp.02", "constraints": [ { "description": "a timeframe to support advertised uptime and availability" } ] }, { "param-id": "mp-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "mp-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "mp-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "mp-2_prm_1", "constraints": [ { "description": "all types of digital and/or non-digital media containing sensitive information" } ] }, { "param-id": "mp-03_odp.01", "constraints": [ { "description": "no removable media types" } ] }, { "param-id": "mp-03_odp.02", "constraints": [ { "description": "organization-defined security safeguards not applicable" } ] }, { "param-id": "mp-4_prm_1", "constraints": [ { "description": "all types of digital and non-digital media with sensitive information" } ] }, { "param-id": "mp-4_prm_2", "constraints": [ { "description": "see additional FedRAMP requirements and guidance" } ] }, { "param-id": "mp-05_odp.01", "constraints": [ { "description": "all media with sensitive information" } ] }, { "param-id": "mp-5_prm_2", "constraints": [ { "description": "prior to leaving secure/controlled environment: for digital media, encryption in compliance with Federal requirements and utilizes FIPS validated or NSA approved cryptography (see SC-13.); for non-digital media, secured in locked container" } ] }, { "param-id": "mp-6_prm_1", "constraints": [ { "description": "techniques and procedures IAW NIST SP 800-88 Section 4: Reuse and Disposal of Storage Media and Hardware" } ] }, { "param-id": "mp-6.2_prm_1", "constraints": [ { "description": "at least every six (6) months" } ] }, { "param-id": "pe-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "pe-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "pe-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "pe-02_odp", "constraints": [ { "description": "at least every ninety (90) days" } ] }, { "param-id": "pe-03_odp.02", "constraints": [ { "description": "CSP defined physical access control systems/devices AND guards" } ] }, { "param-id": "pe-03_odp.06", "constraints": [ { "description": "in all circumstances within restricted access area where the information system resides" } ] }, { "param-id": "pe-03_odp.08", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "pe-3_prm_9", "constraints": [ { "description": "at least annually or earlier as required by a security relevant event." } ] }, { "param-id": "pe-06_odp.01", "constraints": [ { "description": "at least monthly" } ] }, { "param-id": "pe-08_odp.01", "constraints": [ { "description": "for a minimum of one (1) year" } ] }, { "param-id": "pe-08_odp.02", "constraints": [ { "description": "at least monthly" } ] }, { "param-id": "pe-10_odp.02", "constraints": [ { "description": "near more than one egress point of the IT area and ensures it is labeled and protected by a cover to prevent accidental shut-off" } ] }, { "param-id": "pe-11.01_odp", "constraints": [ { "description": "automatically" } ] }, { "param-id": "pe-13.01_odp.01", "constraints": [ { "description": "service provider building maintenance/physical security personnel" } ] }, { "param-id": "pe-13.01_odp.02", "constraints": [ { "description": "service provider emergency responders with incident response responsibilities" } ] }, { "param-id": "pe-14_odp.01", "constraints": [ { "description": "consistent with American Society of Heating, Refrigerating and Air-conditioning Engineers (ASHRAE) document entitled Thermal Guidelines for Data Processing Environments" } ] }, { "param-id": "pe-14_odp.04", "constraints": [ { "description": "continuously" } ] }, { "param-id": "pe-15.01_odp.01", "constraints": [ { "description": "service provider building maintenance/physical security personnel" } ] }, { "param-id": "pe-16_prm_1", "constraints": [ { "description": "all information system components" } ] }, { "param-id": "pe-18_odp", "constraints": [ { "description": "physical and environmental hazards identified during threat assessment" } ] }, { "param-id": "pl-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "pl-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "pl-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "pl-02_odp.01", "constraints": [ { "description": "to include chief privacy and ISSO and/or similar role or designees" } ] }, { "param-id": "pl-02_odp.02", "constraints": [ { "description": "to include chief privacy and ISSO and/or similar role" } ] }, { "param-id": "pl-02_odp.03", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "pl-04_odp.01", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "pl-04_odp.02", "constraints": [ { "description": "at least annually and when the rules are revised or changed" } ] }, { "param-id": "pl-08_odp", "constraints": [ { "description": "at least annually and when a significant change occurs" } ] }, { "param-id": "ps-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ps-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ps-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "ps-02_odp", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ps-3_prm_1", "constraints": [ { "description": "for national security clearances; a reinvestigation is required during the fifth (5th) year for top secret security clearance, the tenth (10th) year for secret security clearance, and fifteenth (15th) year for confidential security clearance.\n\nFor moderate risk law enforcement and high impact public trust level, a reinvestigation is required during the fifth (5th) year. There is no reinvestigation for other moderate risk positions or any low risk positions" } ] }, { "param-id": "ps-03.03_odp", "constraints": [ { "description": "personnel screening criteria - as required by specific information" } ] }, { "param-id": "ps-04_odp.01", "constraints": [ { "description": "one (1) hour" } ] }, { "param-id": "ps-04.02_odp.02", "constraints": [ { "description": "access control personnel responsible for disabling access to the system" } ] }, { "param-id": "ps-05_odp.02", "constraints": [ { "description": "twenty-four (24) hours" } ] }, { "param-id": "ps-05_odp.03", "constraints": [ { "description": "including access control personnel responsible for the system" } ] }, { "param-id": "ps-05_odp.04", "constraints": [ { "description": "twenty-four (24) hours" } ] }, { "param-id": "ps-06_odp.01", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ps-06_odp.02", "constraints": [ { "description": "at least annually and any time there is a change to the user's level of access" } ] }, { "param-id": "ps-07_odp.01", "constraints": [ { "description": "including access control personnel responsible for the system and/or facilities, as appropriate" } ] }, { "param-id": "ps-07_odp.02", "constraints": [ { "description": "terminations: immediately; transfers: within twenty-four (24) hours" } ] }, { "param-id": "ps-08_odp.01", "constraints": [ { "description": "to include the ISSO and/or similar role within the organization" } ] }, { "param-id": "ps-08_odp.02", "constraints": [ { "description": "24 hours" } ] }, { "param-id": "ra-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ra-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "ra-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "ra-03_odp.01", "constraints": [ { "description": "security assessment report" } ] }, { "param-id": "ra-03_odp.03", "constraints": [ { "description": "at least annually and whenever a significant change occurs" } ] }, { "param-id": "ra-03_odp.05", "constraints": [ { "description": "annually" } ] }, { "param-id": "ra-5_prm_1", "constraints": [ { "description": "monthly operating system/infrastructure; monthly web applications (including APIs) and databases" } ] }, { "param-id": "ra-05_odp.03", "constraints": [ { "description": "high-risk vulnerabilities mitigated within thirty (30) days from date of discovery; moderate-risk vulnerabilities mitigated within ninety (90) days from date of discovery; low risk vulnerabilities mitigated within one hundred and eighty (180) days from date of discovery" } ] }, { "param-id": "ra-05.02_odp.01", "constraints": [ { "description": "within 24 hours prior to running scans" } ] }, { "param-id": "ra-05.04_odp", "constraints": [ { "description": "notify appropriate service provider personnel and follow procedures for organization and service provider-defined corrective actions" } ] }, { "param-id": "ra-05.05_odp.01", "constraints": [ { "description": "all components that support authentication" } ] }, { "param-id": "ra-05.05_odp.02", "constraints": [ { "description": "all scans" } ] }, { "param-id": "sa-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "sa-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "sa-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "sa-04.02_odp.01", "constraints": [ { "description": "at a minimum to include security-relevant external system interfaces; high-level design; low-level design; source code or network and data flow diagram;\n\norganization-defined design/implementation information" } ] }, { "param-id": "sa-04.05_odp", "constraints": [ { "description": "The service provider shall use the DoD STIGs to establish configuration settings; Center for Internet Security up to Level 2 (CIS Level 2) guidelines shall be used if STIGs are not available; Custom baselines shall be used if CIS is not available." } ] }, { "param-id": "sa-05_odp.02", "constraints": [ { "description": "at a minimum, the ISSO (or similar role within the organization)" } ] }, { "param-id": "sa-09_odp.01", "constraints": [ { "description": "Appropriate FedRAMP Security Controls Baseline (s) if Federal information is processed or stored within the external system" } ] }, { "param-id": "sa-09_odp.02", "constraints": [ { "description": "Federal/FedRAMP Continuous Monitoring requirements must be met for external systems where Federal information is processed or stored" } ] }, { "param-id": "sa-09.02_odp", "constraints": [ { "description": "all external systems where Federal information is processed or stored" } ] }, { "param-id": "sa-09.05_odp.01", "constraints": [ { "description": "information processing, information or data, AND system services" } ] }, { "param-id": "sa-09.05_odp.02", "constraints": [ { "description": "U.S./U.S. Territories or geographic locations where there is U.S. jurisdiction" } ] }, { "param-id": "sa-09.05_odp.03", "constraints": [ { "description": "all High impact data, systems, or services" } ] }, { "param-id": "sa-10_odp.01", "constraints": [ { "description": "development, implementation, AND operation" } ] }, { "param-id": "sa-15_odp.01", "constraints": [ { "description": "frequency as before first use and annually thereafter" } ] }, { "param-id": "sa-15_odp.02", "constraints": [ { "description": "FedRAMP Security Authorization requirements" } ] }, { "param-id": "sc-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "sc-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "sc-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "sc-05_odp.02", "constraints": [ { "description": "Protect against" } ] }, { "param-id": "sc-05_odp.01", "constraints": [ { "description": "at a minimum: ICMP (ping) flood, SYN flood, slowloris, buffer overflow attack, and volume attack" } ] }, { "param-id": "sc-07.04_odp", "constraints": [ { "description": "at least every ninety (90) days or whenever there is a change in the threat environment that warrants a review of the exceptions" } ] }, { "param-id": "sc-07.05_odp.01", "constraints": [ { "description": "any systems" } ] }, { "param-id": "sc-07.08_odp.02", "constraints": [ { "description": "any network outside of organizational control and any network outside the authorization boundary" } ] }, { "param-id": "sc-07.12_odp.01", "constraints": [ { "description": "Host Intrusion Prevention System (HIPS), Host Intrusion Detection System (HIDS), or minimally a host-based firewall" } ] }, { "param-id": "sc-08_odp", "constraints": [ { "description": "confidentiality AND integrity" } ] }, { "param-id": "sc-08.01_odp", "constraints": [ { "description": "prevent unauthorized disclosure of information AND detect changes to information" } ] }, { "param-id": "sc-10_odp", "constraints": [ { "description": "no longer than ten (10) minutes for privileged sessions and no longer than fifteen (15) minutes for user sessions" } ] }, { "param-id": "sc-12_odp", "constraints": [ { "description": "In accordance with Federal requirements" } ] }, { "param-id": "sc-13_odp.02", "constraints": [ { "description": "FIPS-validated or NSA-approved cryptography" } ] }, { "param-id": "sc-15_odp", "constraints": [ { "description": "no exceptions for computing devices" } ] }, { "param-id": "sc-28_odp.01", "constraints": [ { "description": "confidentiality AND integrity" } ] }, { "param-id": "sc-28.01_odp.02", "constraints": [ { "description": "all information system components storing Federal data or system data that must be protected at the High or Moderate impact levels" } ] }, { "param-id": "sc-45.01_odp.01", "constraints": [ { "description": "At least hourly" } ] }, { "param-id": "sc-45.01_odp.02", "constraints": [ { "description": "http://tf.nist.gov/tf-cgi/servers.cgi" } ] }, { "param-id": "sc-45.01_odp.03", "constraints": [ { "description": "any difference" } ] }, { "param-id": "si-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "si-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "si-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "si-02_odp", "constraints": [ { "description": "within thirty (30) days of release of updates" } ] }, { "param-id": "si-02.02_odp.02", "constraints": [ { "description": "at least monthly" } ] }, { "param-id": "si-03_odp.01", "constraints": [ { "description": "signature based and non-signature based" } ] }, { "param-id": "si-03_odp.02", "constraints": [ { "description": "at least weekly" } ] }, { "param-id": "si-03_odp.03", "constraints": [ { "description": "to include endpoints and network entry and exit points" } ] }, { "param-id": "si-03_odp.04", "constraints": [ { "description": "to include blocking and quarantining malicious code" } ] }, { "param-id": "si-03_odp.05", "constraints": [ { "description": "administrator or defined security personnel near-realtime" } ] }, { "param-id": "si-4.4_prm_1", "constraints": [ { "description": "continuously" } ] }, { "param-id": "si-05_odp.01", "constraints": [ { "description": "to include US-CERT and Cybersecurity and Infrastructure Security Agency (CISA) Directives" } ] }, { "param-id": "si-05_odp.02", "constraints": [ { "description": "to include system security personnel and administrators with configuration/patch-management responsibilities" } ] }, { "param-id": "si-06_odp.04", "constraints": [ { "description": "to include upon system startup and/or restart" } ] }, { "param-id": "si-06_odp.05", "constraints": [ { "description": "at least monthly" } ] }, { "param-id": "si-06_odp.06", "constraints": [ { "description": "to include system administrators and security personnel" } ] }, { "param-id": "si-7.1_prm_3", "constraints": [ { "description": "selection to include security relevant event" } ] }, { "param-id": "si-7.1_prm_4", "constraints": [ { "description": "at least monthly" } ] }, { "param-id": "si-07.02_odp", "constraints": [ { "description": "to include the ISSO and/or similar role within the organization" } ] }, { "param-id": "si-07.15_odp", "constraints": [ { "description": "to include all software and firmware inside the boundary" } ] }, { "param-id": "si-11_odp", "constraints": [ { "description": "to include the ISSO and/or similar role within the organization" } ] }, { "param-id": "sr-1_prm_1", "constraints": [ { "description": "to include chief privacy and ISSO and/or similar role or designees" } ] }, { "param-id": "sr-01_odp.05", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "sr-01_odp.07", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "sr-01_odp.08", "constraints": [ { "description": "significant changes" } ] }, { "param-id": "sr-02_odp.02", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "sr-06_odp", "constraints": [ { "description": "at least annually" } ] }, { "param-id": "sr-08_odp.01", "constraints": [ { "description": "notification of supply chain compromises and results of assessment or audits" } ] }, { "param-id": "sr-11.02_odp", "constraints": [ { "description": "all" } ] } ], "alters": [ { "control-id": "ac-1", "adds": [ { "position": "starting", "by-id": "ac-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "ac-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "ac-10", "adds": [ { "position": "starting", "by-id": "ac-10_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-10_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-11", "adds": [ { "position": "starting", "by-id": "ac-11_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-11_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-11_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-11_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-11.1", "adds": [ { "position": "starting", "by-id": "ac-11.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-11.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-12", "adds": [ { "position": "starting", "by-id": "ac-12_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-12_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-14", "adds": [ { "position": "starting", "by-id": "ac-14_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-14_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-14_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-14_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-17", "adds": [ { "position": "starting", "by-id": "ac-17_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-17_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-17_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-17_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-17.1", "adds": [ { "position": "starting", "by-id": "ac-17.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-17.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-17.2", "adds": [ { "position": "starting", "by-id": "ac-17.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-17.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-17.2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-17.3", "adds": [ { "position": "starting", "by-id": "ac-17.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-17.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-17.4", "adds": [ { "position": "starting", "by-id": "ac-17.4_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-17.4_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-17.4_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-17.4_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-17.4_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-17.4_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-17.4_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-18", "adds": [ { "position": "starting", "by-id": "ac-18_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-18_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-18_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-18_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-18.1", "adds": [ { "position": "starting", "by-id": "ac-18.1_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-18.1_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-18.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-18.3", "adds": [ { "position": "starting", "by-id": "ac-18.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-18.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-18.4", "adds": [ { "position": "starting", "by-id": "ac-18.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-18.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-18.5", "adds": [ { "position": "starting", "by-id": "ac-18.5_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-18.5_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-18.5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-19", "adds": [ { "position": "starting", "by-id": "ac-19_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-19_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-19_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-19_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-19.5", "adds": [ { "position": "starting", "by-id": "ac-19.5_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-19.5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-2", "adds": [ { "position": "starting", "by-id": "ac-2_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.h", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.i.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.i.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.i.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.j", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.k-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.k-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_obj.l", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2_smt.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2_smt.h", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2_smt.i", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2_smt.j", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2_smt.k", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2_smt.l", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-2.1", "adds": [ { "position": "starting", "by-id": "ac-2.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.1", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-2.11", "adds": [ { "position": "starting", "by-id": "ac-2.11_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.11_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.11", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-2.13", "adds": [ { "position": "starting", "by-id": "ac-2.13_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.13_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.13", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-2.2", "adds": [ { "position": "starting", "by-id": "ac-2.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-2.3", "adds": [ { "position": "ending", "by-id": "ac-2.3_smt", "parts": [ { "id": "ac-2.3_fr", "name": "item", "title": "AC-2 (3) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ac-2.3_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The service provider defines the time period for non-user accounts (e.g., accounts associated with devices). The time periods are approved and accepted by the JAB/AO. Where user management is a function of the service, reports of activity of consumer users shall be made available." }, { "id": "ac-2.3_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "(d) Requirement:" } ], "prose": "The service provider defines the time period of inactivity for device identifiers." }, { "id": "ac-2.3_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "For DoD clouds, see DoD cloud website for specific DoD requirements that go above and beyond FedRAMP https://public.cyber.mil/dccs/." } ] } ] }, { "position": "starting", "by-id": "ac-2.3_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.3_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.3_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.3_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.3_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.3_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.3", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-2.4", "adds": [ { "position": "starting", "by-id": "ac-2.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.4", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-2.5", "adds": [ { "position": "ending", "by-id": "ac-2.5_smt", "parts": [ { "id": "ac-2.5_fr", "name": "item", "title": "AC-2 (5) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ac-2.5_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Should use a shorter timeframe than AC-12." } ] } ] }, { "position": "starting", "by-id": "ac-2.5_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.5", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-2.7", "adds": [ { "position": "starting", "by-id": "ac-2.7_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.7_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.7_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.7_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.7_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.7_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.7_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.7_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.7", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-2.9", "adds": [ { "position": "ending", "by-id": "ac-2.9_smt", "parts": [ { "id": "ac-2.9_fr", "name": "item", "title": "AC-2 (9) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ac-2.9_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Required if shared/group accounts are deployed." } ] } ] }, { "position": "starting", "by-id": "ac-2.9_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.9_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.9", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-2.12", "adds": [ { "position": "ending", "by-id": "ac-2.12_smt", "parts": [ { "id": "ac-2.12_fr", "name": "item", "title": "AC-2 (12) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ac-2.12_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(a) Requirement:" } ], "prose": "Required for privileged accounts." }, { "id": "ac-2.12_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "(b) Requirement:" } ], "prose": "Required for privileged accounts." } ] } ] }, { "position": "starting", "by-id": "ac-2.12_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.12_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-2.12_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.12_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-2.12", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-20.1", "adds": [ { "position": "starting", "by-id": "ac-20.1_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-20.1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-20.1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-20.1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-20.2", "adds": [ { "position": "starting", "by-id": "ac-20.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-20.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-21", "adds": [ { "position": "starting", "by-id": "ac-21_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-21_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-21_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-21_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-22", "adds": [ { "position": "starting", "by-id": "ac-22_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-22_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-22_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-22_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-22_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-22_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-22_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-22_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-3", "adds": [ { "position": "starting", "by-id": "ac-3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-3", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-4", "adds": [ { "position": "starting", "by-id": "ac-4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-4.21", "adds": [ { "position": "starting", "by-id": "ac-4.21_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-4.21_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-4.4", "adds": [ { "position": "ending", "by-id": "ac-4.4_smt", "parts": [ { "id": "ac-4.4_fr", "name": "item", "title": "AC-4 (4) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ac-4.4_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The service provider must support Agency requirements to comply with M-21-31 (https://www.whitehouse.gov/wp-content/uploads/2021/08/M-21-31-Improving-the-Federal-Governments-Investigative-and-Remediation-Capabilities-Related-to-Cybersecurity-Incidents.pdf) and M-22-09 (https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf)." } ] } ] }, { "position": "starting", "by-id": "ac-4.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-4.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-5", "adds": [ { "position": "ending", "by-id": "ac-5_smt", "parts": [ { "id": "ac-5_fr", "name": "item", "title": "AC-5 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ac-5_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "CSPs have the option to provide a separation of duties matrix as an attachment to the SSP." } ] } ] }, { "position": "starting", "by-id": "ac-5_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-5_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-5_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-5_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-6", "adds": [ { "position": "starting", "by-id": "ac-6_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-6", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-6.1", "adds": [ { "position": "starting", "by-id": "ac-6.1_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6.1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6.1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-6.1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-6.10", "adds": [ { "position": "starting", "by-id": "ac-6.10_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6.10_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-6.10", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-6.2", "adds": [ { "position": "ending", "by-id": "ac-6.2_smt", "parts": [ { "id": "ac-6.2_fr", "name": "item", "title": "AC-6 (2) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ac-6.2_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Examples of security functions include but are not limited to: establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters, system programming, system and security administration, other privileged functions." } ] } ] }, { "position": "starting", "by-id": "ac-6.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-6.2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-6.3", "adds": [ { "position": "starting", "by-id": "ac-6.3_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6.3_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-6.3", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-6.5", "adds": [ { "position": "starting", "by-id": "ac-6.5_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6.5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-6.5", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-6.7", "adds": [ { "position": "starting", "by-id": "ac-6.7_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6.7_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6.7_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-6.7_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-6.8", "adds": [ { "position": "starting", "by-id": "ac-6.8_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6.8_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-6.8", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ac-6.9", "adds": [ { "position": "starting", "by-id": "ac-6.9_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-6.9_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-7", "adds": [ { "position": "ending", "by-id": "ac-7_smt", "parts": [ { "id": "ac-7_fr", "name": "item", "title": "AC-7 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ac-7_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "In alignment with NIST SP 800-63B." } ] } ] }, { "position": "starting", "by-id": "ac-7_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-7_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-7_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-7_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-8", "adds": [ { "position": "ending", "by-id": "ac-8_smt", "parts": [ { "id": "ac-8_fr", "name": "item", "title": "AC-8 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ac-8_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The service provider shall determine elements of the cloud environment that require the System Use Notification control. The elements of the cloud environment that require System Use Notification are approved and accepted by the JAB/AO." }, { "id": "ac-8_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The service provider shall determine how System Use Notification is going to be verified and provide appropriate periodicity of the check. The System Use Notification verification and periodicity are approved and accepted by the JAB/AO." }, { "id": "ac-8_fr_smt.3", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "If not performed as part of a Configuration Baseline check, then there must be documented agreement on how to provide results of verification and the necessary periodicity of the verification by the service provider. The documented agreement on how to provide verification of the results are approved and accepted by the JAB/AO." }, { "id": "ac-8_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "If performed as part of a Configuration Baseline check, then the % of items requiring setting that are checked and that pass (or fail) check can be provided." } ] } ] }, { "position": "starting", "by-id": "ac-8_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-8_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-8_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-8_obj.a.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-8_obj.a.4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-8_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-8_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-8_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-8_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-8_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ac-20", "adds": [ { "position": "ending", "by-id": "ac-20_smt", "parts": [ { "id": "ac-20_fr", "name": "item", "title": "AC-20 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ac-20_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "The interrelated controls of AC-20, CA-3, and SA-9 should be differentiated as follows:\n\nAC-20 describes system access to and from external systems.\n\nCA-3 describes documentation of an agreement between the respective system owners when data is exchanged between the CSO and an external system.\n\nSA-9 describes the responsibilities of external system owners. These responsibilities would typically be captured in the agreement required by CA-3." } ] } ] }, { "position": "starting", "by-id": "ac-20_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-20_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ac-20_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ac-20_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "at-1", "adds": [ { "position": "starting", "by-id": "at-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "at-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "at-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "at-2", "adds": [ { "position": "starting", "by-id": "at-2_obj.a.1-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-2_obj.a.1-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-2_obj.a.1-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-2_obj.a.1-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-2_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-2_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-2_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "at-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "at-2_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "at-2_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "at-2.2", "adds": [ { "position": "starting", "by-id": "at-2.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-2.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "at-2.3", "adds": [ { "position": "starting", "by-id": "at-2.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-2.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "at-3", "adds": [ { "position": "starting", "by-id": "at-3_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-3_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-3_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-3_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "at-3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "at-3_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "at-4", "adds": [ { "position": "starting", "by-id": "at-4_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-4_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "at-4_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "at-4_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "au-1", "adds": [ { "position": "starting", "by-id": "au-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "au-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "au-10", "adds": [ { "position": "starting", "by-id": "au-10_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-10_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-10", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-12", "adds": [ { "position": "starting", "by-id": "au-12_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-12_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-12_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-12_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-12_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-12_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-12", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-12.1", "adds": [ { "position": "starting", "by-id": "au-12.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-12.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-12.1", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-12.3", "adds": [ { "position": "starting", "by-id": "au-12.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-12.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-12.3", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-2", "adds": [ { "position": "ending", "by-id": "au-2_smt", "parts": [ { "id": "au-2_fr", "name": "item", "title": "AU-2 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "au-2_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Coordination between service provider and consumer shall be documented and accepted by the JAB/AO." }, { "id": "au-2_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "(e) Guidance:" } ], "prose": "Annually or whenever changes in the threat environment are communicated to the service provider by the JAB/AO." } ] } ] }, { "position": "starting", "by-id": "au-2_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-2_obj.c-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-2_obj.c-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-2_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-2_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-2_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-2_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-2_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-3", "adds": [ { "position": "starting", "by-id": "au-3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-3_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-3_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-3_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-3_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-3", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-3.1", "adds": [ { "position": "ending", "by-id": "au-3.1_smt", "parts": [ { "id": "au-3.1_fr", "name": "item", "title": "AU-3 (1) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "au-3.1_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "For client-server transactions, the number of bytes sent and received gives bidirectional transfer information that can be helpful during an investigation or inquiry." } ] } ] }, { "position": "starting", "by-id": "au-3.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-3.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-3.1", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-4", "adds": [ { "position": "starting", "by-id": "au-4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-4", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-5", "adds": [ { "position": "starting", "by-id": "au-5_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-5_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-5_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-5_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-5", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-5.1", "adds": [ { "position": "starting", "by-id": "au-5.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-5.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-5.1", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-5.2", "adds": [ { "position": "starting", "by-id": "au-5.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-5.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-5.2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-6", "adds": [ { "position": "ending", "by-id": "au-6_smt", "parts": [ { "id": "au-6_fr", "name": "item", "title": "AU-6 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "au-6_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Coordination between service provider and consumer shall be documented and accepted by the JAB/AO. In multi-tenant environments, capability and means for providing review, analysis, and reporting to consumer for data pertaining to consumer shall be documented." } ] } ] }, { "position": "starting", "by-id": "au-6_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-6_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-6_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-6_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-6_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-6_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-6", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-6.1", "adds": [ { "position": "starting", "by-id": "au-6.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-6.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-6.1", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-6.3", "adds": [ { "position": "starting", "by-id": "au-6.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-6.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-6.3", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-6.4", "adds": [ { "position": "starting", "by-id": "au-6.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-6.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-6.4", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-6.5", "adds": [ { "position": "starting", "by-id": "au-6.5_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-6.5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-6.5", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-6.6", "adds": [ { "position": "ending", "by-id": "au-6.6_smt", "parts": [ { "id": "au-6.6_fr", "name": "item", "title": "AU-6 (6) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "au-6.6_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Coordination between service provider and consumer shall be documented and accepted by the JAB/AO." } ] } ] }, { "position": "starting", "by-id": "au-6.6_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-6.6_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-6.6", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-6.7", "adds": [ { "position": "starting", "by-id": "au-6.7_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-6.7_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-6.7", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-7", "adds": [ { "position": "starting", "by-id": "au-7_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-7_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-7_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-7_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "au-7.1", "adds": [ { "position": "starting", "by-id": "au-7.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-7.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "au-8", "adds": [ { "position": "starting", "by-id": "au-8_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-8_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-8_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-8_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-8", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-9", "adds": [ { "position": "starting", "by-id": "au-9_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-9_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-9_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-9_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "au-9.2", "adds": [ { "position": "starting", "by-id": "au-9.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-9.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "au-9.3", "adds": [ { "position": "ending", "by-id": "au-9.3_smt", "parts": [ { "id": "au-9.3_fr", "name": "item", "title": "AU-9 (3) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "au-9.3_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Note that this enhancement requires the use of cryptography which must be compliant with Federal requirements and utilize FIPS validated or NSA approved cryptography (see SC-13.)" } ] } ] }, { "position": "starting", "by-id": "au-9.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-9.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "au-11", "adds": [ { "position": "ending", "by-id": "au-11_smt", "parts": [ { "id": "au-11_fr", "name": "item", "title": "AU-11 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "au-11_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The service provider retains audit records on-line for at least ninety days and further preserves audit records off-line for a period that is in accordance with NARA requirements." }, { "id": "au-11_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The service provider must support Agency requirements to comply with M-21-31 (https://www.whitehouse.gov/wp-content/uploads/2021/08/M-21-31-Improving-the-Federal-Governments-Investigative-and-Remediation-Capabilities-Related-to-Cybersecurity-Incidents.pdf)" }, { "id": "au-11_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "The service provider is encouraged to align with M-21-31 where possible" } ] } ] }, { "position": "starting", "by-id": "au-11_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-11_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "au-11", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "au-9.4", "adds": [ { "position": "starting", "by-id": "au-9.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "au-9.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-1", "adds": [ { "position": "starting", "by-id": "ca-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "ca-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "ca-2", "adds": [ { "position": "ending", "by-id": "ca-2_smt", "parts": [ { "id": "ca-2_fr", "name": "item", "title": "CA-2 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ca-2_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Reference FedRAMP Annual Assessment Guidance." } ] } ] }, { "position": "starting", "by-id": "ca-2_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-2_obj.b.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-2_obj.b.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-2_obj.b.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-2_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-2_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-2_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-2_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-2_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-2_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-2_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-2_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-2.1", "adds": [ { "position": "ending", "by-id": "ca-2.1_smt", "parts": [ { "id": "ca-2.1_fr", "name": "item", "title": "CA-2 (1) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ca-2.1_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "For JAB Authorization, must use an accredited 3PAO." } ] } ] }, { "position": "starting", "by-id": "ca-2.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-2.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-2.2", "adds": [ { "position": "ending", "by-id": "ca-2.2_smt", "parts": [ { "id": "ca-2.2_fr", "name": "item", "title": "CA-2 (2) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ca-2.2_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "To include 'announced', 'vulnerability scanning'" } ] } ] }, { "position": "starting", "by-id": "ca-2.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-2.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-2.3", "adds": [ { "position": "starting", "by-id": "ca-2.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-2.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-3", "adds": [ { "position": "starting", "by-id": "ca-3_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-3_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-3_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-3_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-3.6", "adds": [ { "position": "starting", "by-id": "ca-3.6_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-3.6_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-5", "adds": [ { "position": "ending", "by-id": "ca-5_smt", "parts": [ { "id": "ca-5_fr", "name": "item", "title": "CA-5 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ca-5_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "POA&Ms must be provided at least monthly." }, { "id": "ca-5_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Reference FedRAMP-POAM-Template" } ] } ] }, { "position": "starting", "by-id": "ca-5_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-5_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-5_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-5_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-6", "adds": [ { "position": "ending", "by-id": "ca-6_smt", "parts": [ { "id": "ca-6_fr", "name": "item", "title": "CA-6 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ca-6_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "(e) Guidance:" } ], "prose": "Significant change is defined in NIST Special Publication 800-37 Revision 2, Appendix F and according to FedRAMP Significant Change Policies and Procedures. The service provider describes the types of changes to the information system or the environment of operations that would impact the risk posture. The types of changes are approved and accepted by the JAB/AO." } ] } ] }, { "position": "starting", "by-id": "ca-6_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-6_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-6_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-6_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-6_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-6_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-6_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-6_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-6_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-6_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-6_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-7", "adds": [ { "position": "ending", "by-id": "ca-7_smt", "parts": [ { "id": "ca-7_fr", "name": "item", "title": "CA-7 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ca-7_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Operating System, Database, Web Application, Container, and Service Configuration Scans: at least monthly. All scans performed by Independent Assessor: at least annually." }, { "id": "ca-7_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "CSOs with more than one agency ATO must implement a collaborative Continuous Monitoring (ConMon) approach described in the FedRAMP Guide for Multi-Agency Continuous Monitoring. This requirement applies to CSOs authorized via the Agency path as each agency customer is responsible for performing ConMon oversight. It does not apply to CSOs authorized via the JAB path because the JAB performs ConMon oversight." }, { "id": "ca-7_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "FedRAMP does not provide a template for the Continuous Monitoring Plan. CSPs should reference the FedRAMP Continuous Monitoring Strategy Guide when developing the Continuous Monitoring Plan." } ] } ] }, { "position": "starting", "by-id": "ca-7_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7_obj.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-7_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-7_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-7_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-7_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-7_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-7_smt.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-7.1", "adds": [ { "position": "starting", "by-id": "ca-7.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-7.4", "adds": [ { "position": "starting", "by-id": "ca-7.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7.4_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7.4_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7.4_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-7.4_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-7.4_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-7.4_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-8", "adds": [ { "position": "ending", "by-id": "ca-8_smt", "parts": [ { "id": "ca-8_fr", "name": "item", "title": "CA-8 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ca-8_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Reference the FedRAMP Penetration Test Guidance." } ] } ] }, { "position": "starting", "by-id": "ca-8_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-8_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-8.1", "adds": [ { "position": "starting", "by-id": "ca-8.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-8.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ca-8.2", "adds": [ { "position": "ending", "by-id": "ca-8.2_smt", "parts": [ { "id": "ca-8.2_fr", "name": "item", "title": "CA-8(2) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ca-8.2_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "See the FedRAMP Documents page> Penetration Test Guidance\n\nhttps://www.FedRAMP.gov/documents/" } ] } ] }, { "position": "starting", "by-id": "ca-8.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-8.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-8.2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ca-9", "adds": [ { "position": "starting", "by-id": "ca-9_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-9_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-9_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-9_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ca-9_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-9_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-9_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ca-9_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-1", "adds": [ { "position": "starting", "by-id": "cm-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "cm-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "cm-10", "adds": [ { "position": "starting", "by-id": "cm-10_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-10_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-10_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-10_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-10_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-10_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-11", "adds": [ { "position": "starting", "by-id": "cm-11_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-11_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-11_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-11_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-11_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-11_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-2", "adds": [ { "position": "ending", "by-id": "cm-2_smt", "parts": [ { "id": "cm-2_fr", "name": "item", "title": "CM-2 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cm-2_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "(b)(1) Guidance:" } ], "prose": "Significant change is defined in NIST Special Publication 800-37 Revision 2, Appendix F." } ] } ] }, { "position": "starting", "by-id": "cm-2_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-2_obj.b.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-2_obj.b.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-2_obj.b.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-2.2", "adds": [ { "position": "starting", "by-id": "cm-2.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-2.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-2.3", "adds": [ { "position": "starting", "by-id": "cm-2.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-2.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-2.7", "adds": [ { "position": "starting", "by-id": "cm-2.7_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-2.7_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-2.7_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-2.7_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-3", "adds": [ { "position": "ending", "by-id": "cm-3_smt", "parts": [ { "id": "cm-3_fr", "name": "item", "title": "CM-3 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cm-3_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The service provider establishes a central means of communicating major changes to or developments in the information system or environment of operations that may affect its services to the federal government and associated service consumers (e.g., electronic bulletin board, web status page). The means of communication are approved and accepted by the JAB/AO." }, { "id": "cm-3_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "(e) Guidance:" } ], "prose": "In accordance with record retention policies and procedures." } ] } ] }, { "position": "starting", "by-id": "cm-3_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3_obj.g-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3_obj.g-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-3_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-3_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-3_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-3_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-3_smt.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-3.1", "adds": [ { "position": "starting", "by-id": "cm-3.1_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3.1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3.1_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3.1_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3.1_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3.1_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3.1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-3.1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-3.1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-3.1_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-3.1_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-3.1_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-3.2", "adds": [ { "position": "starting", "by-id": "cm-3.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-3.4", "adds": [ { "position": "starting", "by-id": "cm-3.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-3.6", "adds": [ { "position": "starting", "by-id": "cm-3.6_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-3.6_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-4", "adds": [ { "position": "starting", "by-id": "cm-4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-4.1", "adds": [ { "position": "starting", "by-id": "cm-4.1_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-4.1_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-4.1_obj-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-4.1_obj-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-4.1_obj-5", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-4.1_obj-6", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-4.1_obj-7", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-4.1_obj-8", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-4.1_obj-9", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-4.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-4.2", "adds": [ { "position": "starting", "by-id": "cm-4.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-4.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-5", "adds": [ { "position": "starting", "by-id": "cm-5_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-5", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "cm-5.1", "adds": [ { "position": "starting", "by-id": "cm-5.1_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-5.1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-5.1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-5.1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-5.5", "adds": [ { "position": "starting", "by-id": "cm-5.5_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-5.5_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-5.5_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-5.5_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-6", "adds": [ { "position": "ending", "by-id": "cm-6_smt", "parts": [ { "id": "cm-6_fr", "name": "item", "title": "CM-6 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cm-6_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(a) Requirement 1:" } ], "prose": "The service provider shall use the DoD STIGs to establish configuration settings; Center for Internet Security up to Level 2 (CIS Level 2) guidelines shall be used if STIGs are not available; Custom baselines shall be used if CIS is not available." }, { "id": "cm-6_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "(a) Requirement 2:" } ], "prose": "The service provider shall ensure that checklists for configuration settings are Security Content Automation Protocol (SCAP) validated or SCAP compatible (if validated checklists are not available)." }, { "id": "cm-6_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Compliance checks are used to evaluate configuration settings and provide general insight into the overall effectiveness of configuration management activities. CSPs and 3PAOs typically combine compliance check findings into a single CM-6 finding, which is acceptable. However, for initial assessments, annual assessments, and significant change requests, FedRAMP requires a clear understanding, on a per-control basis, where risks exist. Therefore, 3PAOs must also analyze compliance check findings as part of the controls assessment. Where a direct mapping exists, the 3PAO must document additional findings per control in the corresponding SAR Risk Exposure Table (RET), which are then documented in the CSP's Plan of Action and Milestones (POA&M). This will likely result in the details of individual control findings overlapping with those in the combined CM-6 finding, which is acceptable.\n\nDuring monthly continuous monitoring, new findings from CSP compliance checks may be combined into a single CM-6 POA&M item. CSPs are not required to map the findings to specific controls because controls are only assessed during initial assessments, annual assessments, and significant change requests." } ] } ] }, { "position": "starting", "by-id": "cm-6_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-6_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-6_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-6_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-6_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-6_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-6_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-6_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-6", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "cm-6.1", "adds": [ { "position": "starting", "by-id": "cm-6.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-6.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-6.1", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "cm-6.2", "adds": [ { "position": "starting", "by-id": "cm-6.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-6.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-6.2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "cm-7", "adds": [ { "position": "ending", "by-id": "cm-7_smt", "parts": [ { "id": "cm-7_fr", "name": "item", "title": "CM-7 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cm-7_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(b) Requirement:" } ], "prose": "The service provider shall use Security guidelines (See CM-6) to establish list of prohibited or restricted functions, ports, protocols, and/or services or establishes its own list of prohibited or restricted functions, ports, protocols, and/or services if STIGs or CIS is not available." } ] } ] }, { "position": "starting", "by-id": "cm-7_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-7_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-7_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-7_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-7", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "cm-7.1", "adds": [ { "position": "starting", "by-id": "cm-7.1_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-7.1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-7.1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-7.1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-7.1", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "cm-7.2", "adds": [ { "position": "ending", "by-id": "cm-7.2_smt", "parts": [ { "id": "cm-7.2_fr", "name": "item", "title": "CM-7 (2) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cm-7.2_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "This control refers to software deployment by CSP personnel into the production environment. The control requires a policy that states conditions for deploying software. This control shall be implemented in a technical manner on the information system to only allow programs to run that adhere to the policy (i.e. allow-listing). This control is not to be based off of strictly written policy on what is allowed or not allowed to run." } ] } ] }, { "position": "starting", "by-id": "cm-7.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-7.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-7.2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "cm-7.5", "adds": [ { "position": "starting", "by-id": "cm-7.5_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-7.5_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-7.5_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-7.5_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-7.5_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-7.5_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-7.5", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "cm-8", "adds": [ { "position": "ending", "by-id": "cm-8_smt", "parts": [ { "id": "cm-8_fr", "name": "item", "title": "CM-8 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cm-8_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "must be provided at least monthly or when there is a change." } ] } ] }, { "position": "starting", "by-id": "cm-8_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-8_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-8_obj.a.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-8_obj.a.4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-8_obj.a.5", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-8_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-8_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-8_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-8", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "cm-8.1", "adds": [ { "position": "starting", "by-id": "cm-8.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-8.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-8.2", "adds": [ { "position": "starting", "by-id": "cm-8.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-8.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-8.3", "adds": [ { "position": "starting", "by-id": "cm-8.3_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-8.3_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-8.3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-8.3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-8.4", "adds": [ { "position": "starting", "by-id": "cm-8.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-8.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-9", "adds": [ { "position": "ending", "by-id": "cm-9_smt", "parts": [ { "id": "cm-9_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "FedRAMP does not provide a template for the Configuration Management Plan. However, NIST SP 800-128, Guide for Security-Focused Configuration Management of Information Systems, provides guidelines for the implementation of CM controls as well as a sample CMP outline in Appendix D of the Guide" } ] }, { "position": "starting", "by-id": "cm-9_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-9_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-9_obj.b-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-9_obj.b-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-9_obj.c-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-9_obj.c-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-9_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-9_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-9_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-9_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-9_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-9_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-9_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-12", "adds": [ { "position": "ending", "by-id": "cm-12_smt", "parts": [ { "id": "cm-12_fr", "name": "item", "title": "CM-12 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cm-12_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "According to FedRAMP Authorization Boundary Guidance" } ] } ] }, { "position": "starting", "by-id": "cm-12_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-12_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-12_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-12_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-12_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-12_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-12_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cm-12_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-12.1", "adds": [ { "position": "ending", "by-id": "cm-12.1_smt", "parts": [ { "id": "cm-12.1_fr", "name": "item", "title": "CM-12 (1) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cm-12.1_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "According to FedRAMP Authorization Boundary Guidance." } ] } ] }, { "position": "starting", "by-id": "cm-12.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-12.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cm-14", "adds": [ { "position": "ending", "by-id": "cm-14_smt", "parts": [ { "id": "cm-14_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "If digital signatures/certificates are unavailable, alternative cryptographic integrity checks (hashes, self-signed certs, etc.) can be utilized." } ] }, { "position": "starting", "by-id": "cm-14_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cm-14_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-1", "adds": [ { "position": "starting", "by-id": "cp-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "cp-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "cp-10", "adds": [ { "position": "starting", "by-id": "cp-10_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-10_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-10.2", "adds": [ { "position": "starting", "by-id": "cp-10.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-10.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-10.4", "adds": [ { "position": "starting", "by-id": "cp-10.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-10.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-2", "adds": [ { "position": "ending", "by-id": "cp-2_smt", "parts": [ { "id": "cp-2_fr", "name": "item", "title": "CP-2 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cp-2_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "For JAB authorizations the contingency lists include designated FedRAMP personnel." }, { "id": "cp-2_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "CSPs must use the FedRAMP Information System Contingency Plan (ISCP) Template (available on the fedramp.gov: https://www.fedramp.gov/assets/resources/templates/SSP-A06-FedRAMP-ISCP-Template.docx)." } ] } ] }, { "position": "starting", "by-id": "cp-2_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.a.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.a.4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.a.5", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.a.6", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.a.7", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.b-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.b-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.e-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.e-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_obj.h", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-2_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-2_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-2_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-2_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-2_smt.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-2_smt.h", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-2.1", "adds": [ { "position": "starting", "by-id": "cp-2.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-2.2", "adds": [ { "position": "starting", "by-id": "cp-2.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-2.3", "adds": [ { "position": "starting", "by-id": "cp-2.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-2.5", "adds": [ { "position": "starting", "by-id": "cp-2.5_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2.5_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2.5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-2.8", "adds": [ { "position": "starting", "by-id": "cp-2.8_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-2.8_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-3", "adds": [ { "position": "ending", "by-id": "cp-3_smt", "parts": [ { "id": "cp-3_fr", "name": "item", "title": "CP-3 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cp-3_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(a) Requirement:" } ], "prose": "Privileged admins and engineers must take the basic contingency training within 10 days. Consideration must be given for those privileged admins and engineers with critical contingency-related roles, to gain enough system context and situational awareness to understand the full impact of contingency training as it applies to their respective level. Newly hired critical contingency personnel must take this more in-depth training within 60 days of hire date when the training will have more impact." } ] } ] }, { "position": "starting", "by-id": "cp-3_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-3_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-3_obj.a.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-3_obj.b-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-3_obj.b-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-3.1", "adds": [ { "position": "starting", "by-id": "cp-3.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-3.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-4", "adds": [ { "position": "ending", "by-id": "cp-4_smt", "parts": [ { "id": "cp-4_fr", "name": "item", "title": "CP-4 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cp-4_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(a) Requirement:" } ], "prose": "The service provider develops test plans in accordance with NIST Special Publication 800-34 (as amended); plans are approved by the JAB/AO prior to initiating testing." }, { "id": "cp-4_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(b) Requirement:" } ], "prose": "The service provider must include the Contingency Plan test results with the security package within the Contingency Plan-designated appendix (Appendix G, Contingency Plan Test Report)." } ] } ] }, { "position": "starting", "by-id": "cp-4_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-4_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-4_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-4_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-4_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-4_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-4_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-4_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-4", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "cp-4.1", "adds": [ { "position": "starting", "by-id": "cp-4.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-4.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-4.2", "adds": [ { "position": "starting", "by-id": "cp-4.2_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-4.2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-4.2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-4.2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-6", "adds": [ { "position": "starting", "by-id": "cp-6_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-6_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-6_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-6_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-6_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-6.1", "adds": [ { "position": "starting", "by-id": "cp-6.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-6.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-6.2", "adds": [ { "position": "starting", "by-id": "cp-6.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-6.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-6.3", "adds": [ { "position": "starting", "by-id": "cp-6.3_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-6.3_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-6.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-7", "adds": [ { "position": "ending", "by-id": "cp-7_smt", "parts": [ { "id": "cp-7_fr", "name": "item", "title": "CP-7 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cp-7_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(a) Requirement:" } ], "prose": "The service provider defines a time period consistent with the recovery time objectives and business impact analysis." } ] } ] }, { "position": "starting", "by-id": "cp-7_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-7_obj.b-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-7_obj.b-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-7_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-7_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-7_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-7_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-7.1", "adds": [ { "position": "ending", "by-id": "cp-7.1_smt", "parts": [ { "id": "cp-7.1_fr", "name": "item", "title": "CP-7 (1) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cp-7.1_fr_smt.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "The service provider may determine what is considered a sufficient degree of separation between the primary and alternate processing sites, based on the types of threats that are of concern. For one particular type of threat (i.e., hostile cyber attack), the degree of separation between sites will be less relevant." } ] } ] }, { "position": "starting", "by-id": "cp-7.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-7.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-7.2", "adds": [ { "position": "starting", "by-id": "cp-7.2_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-7.2_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-7.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-7.3", "adds": [ { "position": "starting", "by-id": "cp-7.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-7.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-7.4", "adds": [ { "position": "starting", "by-id": "cp-7.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-7.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-8", "adds": [ { "position": "ending", "by-id": "cp-8_smt", "parts": [ { "id": "cp-8_fr", "name": "item", "title": "CP-8 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cp-8_fr_gdn.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The service provider defines a time period consistent with the recovery time objectives and business impact analysis." } ] } ] }, { "position": "starting", "by-id": "cp-8_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-8_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-8.1", "adds": [ { "position": "starting", "by-id": "cp-8.1_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-8.1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-8.1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-8.1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-8.2", "adds": [ { "position": "starting", "by-id": "cp-8.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-8.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-8.3", "adds": [ { "position": "starting", "by-id": "cp-8.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-8.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-8.4", "adds": [ { "position": "starting", "by-id": "cp-8.4_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-8.4_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-8.4_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-8.4_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-8.4_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-8.4_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-9", "adds": [ { "position": "ending", "by-id": "cp-9_smt", "parts": [ { "id": "cp-9_fr", "name": "item", "title": "CP-9 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cp-9_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The service provider shall determine what elements of the cloud environment require the Information System Backup control. The service provider shall determine how Information System Backup is going to be verified and appropriate periodicity of the check." }, { "id": "cp-9_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "(a) Requirement:" } ], "prose": "The service provider maintains at least three backup copies of user-level information (at least one of which is available online) or provides an equivalent alternative." }, { "id": "cp-9_fr_smt.3", "name": "item", "props": [ { "name": "label", "value": "(b) Requirement:" } ], "prose": "The service provider maintains at least three backup copies of system-level information (at least one of which is available online) or provides an equivalent alternative." }, { "id": "cp-9_fr_smt.4", "name": "item", "props": [ { "name": "label", "value": "(c) Requirement:" } ], "prose": "The service provider maintains at least three backup copies of information system documentation including security information (at least one of which is available online) or provides an equivalent alternative." } ] } ] }, { "position": "starting", "by-id": "cp-9_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-9_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-9_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-9_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-9_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-9_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-9_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "cp-9_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-9.1", "adds": [ { "position": "starting", "by-id": "cp-9.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-9.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-9.2", "adds": [ { "position": "starting", "by-id": "cp-9.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-9.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-9.3", "adds": [ { "position": "starting", "by-id": "cp-9.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-9.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-9.5", "adds": [ { "position": "starting", "by-id": "cp-9.5_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-9.5_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-9.5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "cp-9.8", "adds": [ { "position": "ending", "by-id": "cp-9.8_smt", "parts": [ { "id": "cp-9.8_fr", "name": "item", "title": "CP-9 (8) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "cp-9.8_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Note that this enhancement requires the use of cryptography which must be compliant with Federal requirements and utilize FIPS validated or NSA approved cryptography (see SC-13.)" } ] } ] }, { "position": "starting", "by-id": "cp-9.8_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "cp-9.8_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-1", "adds": [ { "position": "starting", "by-id": "ia-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "ia-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "ia-12.2", "adds": [ { "position": "starting", "by-id": "ia-12.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-12.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-12.3", "adds": [ { "position": "starting", "by-id": "ia-12.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-12.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-12.4", "adds": [ { "position": "starting", "by-id": "ia-12.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-12.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-2", "adds": [ { "position": "ending", "by-id": "ia-2_smt", "parts": [ { "id": "ia-2_fr", "name": "item", "title": "IA-2 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-2_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "For all control enhancements that specify multifactor authentication, the implementation must adhere to the Digital Identity Guidelines specified in NIST Special Publication 800-63B." }, { "id": "ia-2_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Multi-factor authentication must be phishing-resistant." }, { "id": "ia-2_fr_smt.3", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "All uses of encrypted virtual private networks must meet all applicable Federal requirements and architecture, dataflow, and security and privacy controls must be documented, assessed, and authorized to operate." }, { "id": "ia-2_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "\\\"Phishing-resistant\\\" authentication refers to authentication processes designed to detect and prevent disclosure of authentication secrets and outputs to a website or application masquerading as a legitimate system." } ] } ] }, { "position": "starting", "by-id": "ia-2_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-2_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ia-2.1", "adds": [ { "position": "ending", "by-id": "ia-2.1_smt", "parts": [ { "id": "ia-2.1_fr", "name": "item", "title": "IA-2 (1) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-2.1_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "According to SP 800-63-3, SP 800-63A (IAL), SP 800-63B (AAL), and SP 800-63C (FAL)." }, { "id": "ia-2.1_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Multi-factor authentication must be phishing-resistant." }, { "id": "ia-2.1_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Multi-factor authentication to subsequent components in the same user domain is not required." } ] } ] }, { "position": "starting", "by-id": "ia-2.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-2.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-2.1", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ia-2.2", "adds": [ { "position": "ending", "by-id": "ia-2.2_smt", "parts": [ { "id": "ia-2.2_fr", "name": "item", "title": "IA-2 (2) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-2.2_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "According to SP 800-63-3, SP 800-63A (IAL), SP 800-63B (AAL), and SP 800-63C (FAL)." }, { "id": "ia-2.2_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Multi-factor authentication must be phishing-resistant." }, { "id": "ia-2.2_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Multi-factor authentication to subsequent components in the same user domain is not required." } ] } ] }, { "position": "starting", "by-id": "ia-2.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-2.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-2.2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ia-2.5", "adds": [ { "position": "starting", "by-id": "ia-2.5_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-2.5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-2.5", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ia-2.6", "adds": [ { "position": "ending", "by-id": "ia-2.6_smt", "parts": [ { "id": "ia-2.6_fr", "name": "item", "title": "IA-2 (6) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-2.6_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "PIV=separate device. Please refer to NIST SP 800-157 Guidelines for Derived Personal Identity Verification (PIV) Credentials." }, { "id": "ia-2.6_fr_gdn.2", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "See SC-13 Guidance for more information on FIPS-validated or NSA-approved cryptography." } ] } ] }, { "position": "starting", "by-id": "ia-2.6_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-2.6_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-2.6_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-2.6_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-2.6", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ia-2.12", "adds": [ { "position": "ending", "by-id": "ia-2.12_smt", "parts": [ { "id": "ia-2.12_fr", "name": "item", "title": "IA-2 (12) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-2.12_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Include Common Access Card (CAC), i.e., the DoD technical implementation of PIV/FIPS 201/HSPD-12." } ] } ] }, { "position": "starting", "by-id": "ia-2.12_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-2.12_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-2.12", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ia-2.8", "adds": [ { "position": "starting", "by-id": "ia-2.8_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-2.8_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-2.8", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ia-3", "adds": [ { "position": "starting", "by-id": "ia-3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-4", "adds": [ { "position": "starting", "by-id": "ia-4_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-4_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-4_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-4_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-4_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-4_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-4_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-4_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-4", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ia-4.4", "adds": [ { "position": "starting", "by-id": "ia-4.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-4.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-5", "adds": [ { "position": "ending", "by-id": "ia-5_smt", "parts": [ { "id": "ia-5_fr", "name": "item", "title": "IA-5 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-5_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Authenticators must be compliant with NIST SP 800-63-3 Digital Identity Guidelines IAL, AAL, FAL level 3. Link https://pages.nist.gov/800-63-3" }, { "id": "ia-5_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "SP 800-63C Section 6.2.3 Encrypted Assertion requires that authentication assertions be encrypted when passed through third parties, such as a browser. For example, a SAML assertion can be encrypted using XML-Encryption, or an OpenID Connect ID Token can be encrypted using JSON Web Encryption (JWE)." } ] } ] }, { "position": "starting", "by-id": "ia-5_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5_obj.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5_obj.h-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5_obj.h-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5_obj.i", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5_smt.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5_smt.h", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5_smt.i", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ia-5.1", "adds": [ { "position": "ending", "by-id": "ia-5.1_smt", "parts": [ { "id": "ia-5.1_fr", "name": "item", "title": "IA-5 (1) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-5.1_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Password policies must be compliant with NIST SP 800-63B for all memorized, lookup, out-of-band, or One-Time-Passwords (OTP). Password policies shall not enforce special character or minimum password rotation requirements for memorized secrets of users." }, { "id": "ia-5.1_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "(h) Requirement:" } ], "prose": "For cases where technology doesn't allow multi-factor authentication, these rules should be enforced: must have a minimum length of 14 characters and must support all printable ASCII characters.\n\nFor emergency use accounts, these rules should be enforced: must have a minimum length of 14 characters, must support all printable ASCII characters, and passwords must be changed if used." }, { "id": "ia-5.1_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Note that (c) and (d) require the use of cryptography which must be compliant with Federal requirements and utilize FIPS validated or NSA approved cryptography (see SC-13)." } ] } ] }, { "position": "starting", "by-id": "ia-5.1_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.1_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.1_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.1_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.1_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.1_obj.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.1_obj.h", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5.1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5.1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5.1_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5.1_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5.1_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5.1_smt.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5.1_smt.h", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-5.2", "adds": [ { "position": "starting", "by-id": "ia-5.2_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.2_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.2_obj.b.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.2_obj.b.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-5.2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-5.6", "adds": [ { "position": "starting", "by-id": "ia-5.6_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.6_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-5.7", "adds": [ { "position": "ending", "by-id": "ia-5.7_smt", "parts": [ { "id": "ia-5.7_fr", "name": "item", "title": "IA-5 (7) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-5.7_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "In this context, prohibited static storage refers to any storage where unencrypted authenticators, such as passwords, persist beyond the time required to complete the access process." } ] } ] }, { "position": "starting", "by-id": "ia-5.7_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.7_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-5.8", "adds": [ { "position": "ending", "by-id": "ia-5.8_smt", "parts": [ { "id": "ia-5.8_fr", "name": "item", "title": "IA-5 (8) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-5.8_fr_gdn.x", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "If a single user authentication domain is used to access multiple systems, such as in single-sign-on, then only a single authenticator is required." } ] } ] }, { "position": "starting", "by-id": "ia-5.8_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.8_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-5.13", "adds": [ { "position": "ending", "by-id": "ia-5.13_smt", "parts": [ { "id": "ia-5.13_fr", "name": "item", "title": "IA-5 (13) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-5.13_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "For components subject to configuration baseline(s) (such as STIG or CIS,) the time period should conform to the baseline standard." } ] } ] }, { "position": "starting", "by-id": "ia-5.13_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-5.13_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-11", "adds": [ { "position": "ending", "by-id": "ia-11_smt", "parts": [ { "id": "ia-11_fr", "name": "item", "title": "IA-11 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-11_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "The fixed time period cannot exceed the limits set in SP 800-63. At this writing they are:\n\n* AAL3 (high baseline) * 12 hours or * 15 minutes of inactivity \n" } ] } ] }, { "position": "starting", "by-id": "ia-11_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-11_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-12", "adds": [ { "position": "ending", "by-id": "ia-12_smt", "parts": [ { "id": "ia-12_fr", "name": "item", "title": "IA-12 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-12_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "In accordance with NIST SP 800-63A Enrollment and Identity Proofing" } ] } ] }, { "position": "starting", "by-id": "ia-12_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-12_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-12_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-12_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-12_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-12_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-12.5", "adds": [ { "position": "ending", "by-id": "ia-12.5_smt", "parts": [ { "id": "ia-12.5_fr", "name": "item", "title": "IA-12 (5) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ia-12.5_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "In accordance with NIST SP 800-63A Enrollment and Identity Proofing" } ] } ] }, { "position": "starting", "by-id": "ia-12.5_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-12.5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-6", "adds": [ { "position": "starting", "by-id": "ia-6_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-6_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-7", "adds": [ { "position": "starting", "by-id": "ia-7_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-7_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-8", "adds": [ { "position": "starting", "by-id": "ia-8_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-8_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-8.1", "adds": [ { "position": "starting", "by-id": "ia-8.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-8.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-8.2", "adds": [ { "position": "starting", "by-id": "ia-8.2_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-8.2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-8.2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ia-8.2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ia-8.4", "adds": [ { "position": "starting", "by-id": "ia-8.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ia-8.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-1", "adds": [ { "position": "starting", "by-id": "ir-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "ir-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "ir-2", "adds": [ { "position": "starting", "by-id": "ir-2_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-2_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-2_obj.a.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-2_obj.b-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-2_obj.b-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-2.1", "adds": [ { "position": "starting", "by-id": "ir-2.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-2.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-2.2", "adds": [ { "position": "starting", "by-id": "ir-2.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-2.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-3", "adds": [ { "position": "ending", "by-id": "ir-3_smt", "parts": [ { "id": "ir-3_fr", "name": "item", "title": "IR-3-2 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ir-3_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The service provider defines tests and/or exercises in accordance with NIST Special Publication 800-61 (as amended). Functional testing must occur prior to testing for initial authorization. Annual functional testing may be concurrent with required penetration tests (see CA-8). The service provider provides test plans to the JAB/AO annually. Test plans are approved and accepted by the JAB/AO prior to test commencing." } ] } ] }, { "position": "starting", "by-id": "ir-3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-3", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ir-3.2", "adds": [ { "position": "starting", "by-id": "ir-3.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-3.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-4", "adds": [ { "position": "ending", "by-id": "ir-4_smt", "parts": [ { "id": "ir-4_fr", "name": "item", "title": "IR-4 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ir-4_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The FISMA definition of \\\"incident\\\" shall be used: \\\"An occurrence that actually or imminently jeopardizes, without lawful authority, the confidentiality, integrity, or availability of information or an information system; or constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.\\\"" }, { "id": "ir-4_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "The service provider ensures that individuals conducting incident handling meet personnel security requirements commensurate with the criticality/sensitivity of the information being processed, stored, and transmitted by the information system." } ] } ] }, { "position": "starting", "by-id": "ir-4_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4_obj.c-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4_obj.c-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-4_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-4_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-4_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-4", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ir-4.1", "adds": [ { "position": "starting", "by-id": "ir-4.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-4.1", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ir-4.11", "adds": [ { "position": "starting", "by-id": "ir-4.11_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4.11_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4.11_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-4.2", "adds": [ { "position": "starting", "by-id": "ir-4.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-4.2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ir-4.4", "adds": [ { "position": "starting", "by-id": "ir-4.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-4.4", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ir-4.6", "adds": [ { "position": "starting", "by-id": "ir-4.6_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-4.6_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-4.6", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ir-5", "adds": [ { "position": "starting", "by-id": "ir-5_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-5.1", "adds": [ { "position": "starting", "by-id": "ir-5.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-5.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-6", "adds": [ { "position": "ending", "by-id": "ir-6_smt", "parts": [ { "id": "ir-6_fr", "name": "item", "title": "IR-6 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ir-6_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Reports security incident information according to FedRAMP Incident Communications Procedure." } ] } ] }, { "position": "starting", "by-id": "ir-6_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-6_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-6_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-6_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-6.1", "adds": [ { "position": "starting", "by-id": "ir-6.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-6.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-6.3", "adds": [ { "position": "starting", "by-id": "ir-6.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-6.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-7", "adds": [ { "position": "starting", "by-id": "ir-7_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-7_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-7_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-7.1", "adds": [ { "position": "starting", "by-id": "ir-7.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-7.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-8", "adds": [ { "position": "ending", "by-id": "ir-8_smt", "parts": [ { "id": "ir-8_fr", "name": "item", "title": "IR-8 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ir-8_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(b) Requirement:" } ], "prose": "The service provider defines a list of incident response personnel (identified by name and/or by role) and organizational elements. The incident response list includes designated FedRAMP personnel." }, { "id": "ir-8_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "(d) Requirement:" } ], "prose": "The service provider defines a list of incident response personnel (identified by name and/or by role) and organizational elements. The incident response list includes designated FedRAMP personnel." } ] } ] }, { "position": "starting", "by-id": "ir-8_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.a.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.a.4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.a.5", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.a.6", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.a.7", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.a.8", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.a.9", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.a.10", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-8_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-8_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-8_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-8_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-8_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-9", "adds": [ { "position": "starting", "by-id": "ir-9_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-9_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-9_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-9_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-9_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-9_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-9_obj.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-9_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-9_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-9_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-9_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-9_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-9_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ir-9_smt.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-9.2", "adds": [ { "position": "starting", "by-id": "ir-9.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-9.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-9.3", "adds": [ { "position": "starting", "by-id": "ir-9.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-9.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ir-9.4", "adds": [ { "position": "starting", "by-id": "ir-9.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ir-9.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ma-1", "adds": [ { "position": "starting", "by-id": "ma-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "ma-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "ma-2", "adds": [ { "position": "starting", "by-id": "ma-2_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-2_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-2_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-2_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-2_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-2_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-2_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-2_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-2_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ma-2.2", "adds": [ { "position": "starting", "by-id": "ma-2.2_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-2.2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-2.2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-2.2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ma-3", "adds": [ { "position": "starting", "by-id": "ma-3_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-3_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ma-3.1", "adds": [ { "position": "starting", "by-id": "ma-3.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-3.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ma-3.2", "adds": [ { "position": "starting", "by-id": "ma-3.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-3.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-3.2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ma-3.3", "adds": [ { "position": "starting", "by-id": "ma-3.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-3.3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-3.3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-3.3_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-3.3_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ma-4", "adds": [ { "position": "starting", "by-id": "ma-4_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-4_obj.b-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-4_obj.b-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-4_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-4_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-4_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-4_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-4_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-4_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-4_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-4_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ma-4.3", "adds": [ { "position": "starting", "by-id": "ma-4.3_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-4.3_obj.b-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-4.3_obj.b-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-4.3_obj.b-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-4.3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-4.3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ma-5", "adds": [ { "position": "starting", "by-id": "ma-5_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-5_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-5_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-5_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-5_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-5_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ma-5.1", "adds": [ { "position": "starting", "by-id": "ma-5.1_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-5.1_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-5.1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-5.1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ma-5.1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ma-6", "adds": [ { "position": "starting", "by-id": "ma-6_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ma-6_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "mp-1", "adds": [ { "position": "starting", "by-id": "mp-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "mp-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "mp-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "mp-2", "adds": [ { "position": "starting", "by-id": "mp-2_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-2_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "mp-3", "adds": [ { "position": "ending", "by-id": "mp-3_smt", "parts": [ { "id": "mp-3_fr", "name": "item", "title": "MP-3 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "mp-3_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "(b) Guidance:" } ], "prose": "Second parameter not-applicable" } ] } ] }, { "position": "starting", "by-id": "mp-3_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-3_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "mp-3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "mp-4", "adds": [ { "position": "ending", "by-id": "mp-4_smt", "parts": [ { "id": "mp-4_fr", "name": "item", "title": "MP-4 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "mp-4_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(a) Requirement:" } ], "prose": "The service provider defines controlled areas within facilities where the information and information system reside." } ] } ] }, { "position": "starting", "by-id": "mp-4_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-4_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-4_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-4_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-4_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-4_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "mp-4_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "mp-5", "adds": [ { "position": "ending", "by-id": "mp-5_smt", "parts": [ { "id": "mp-5_fr", "name": "item", "title": "MP-5 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "mp-5_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(a) Requirement:" } ], "prose": "The service provider defines security measures to protect digital and non-digital media in transport. The security measures are approved and accepted by the JAB/AO." } ] } ] }, { "position": "starting", "by-id": "mp-5_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-5_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-5_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-5_obj.d-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-5_obj.d-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-5_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "mp-5_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "mp-5_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "mp-5_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "mp-6", "adds": [ { "position": "starting", "by-id": "mp-6_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-6_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-6_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "mp-6_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "mp-6.1", "adds": [ { "position": "ending", "by-id": "mp-6.1_smt", "parts": [ { "id": "mp-6.1_fr", "name": "item", "title": "MP-6 (1) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "mp-6.1_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Must comply with NIST SP 800-88" } ] } ] }, { "position": "starting", "by-id": "mp-6.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-6.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "mp-6.2", "adds": [ { "position": "ending", "by-id": "mp-6.2_smt", "parts": [ { "id": "mp-6.2_fr", "name": "item", "title": "MP-6 (2) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "mp-6.2_fr_smt.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Equipment and procedures may be tested or validated for effectiveness" } ] } ] }, { "position": "starting", "by-id": "mp-6.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-6.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "mp-6.3", "adds": [ { "position": "ending", "by-id": "mp-6.3_smt", "parts": [ { "id": "mp-6.3_fr", "name": "item", "title": "MP-6 (3) Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "mp-6.3_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Must comply with NIST SP 800-88" } ] } ] }, { "position": "starting", "by-id": "mp-6.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-6.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "mp-7", "adds": [ { "position": "starting", "by-id": "mp-7_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-7_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "mp-7_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "mp-7_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-1", "adds": [ { "position": "starting", "by-id": "pe-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "pe-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "pe-10", "adds": [ { "position": "starting", "by-id": "pe-10_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-10_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-10_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-10_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-10_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-10_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-11", "adds": [ { "position": "starting", "by-id": "pe-11_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-11_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-11.1", "adds": [ { "position": "starting", "by-id": "pe-11.1_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-11.1_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-11.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-12", "adds": [ { "position": "starting", "by-id": "pe-12_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-12_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-12_obj-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-12_obj-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-12_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-13", "adds": [ { "position": "starting", "by-id": "pe-13_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13_obj-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13_obj-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13_obj-5", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13_obj-6", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-13.1", "adds": [ { "position": "starting", "by-id": "pe-13.1_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13.1_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13.1_obj-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-13.2", "adds": [ { "position": "starting", "by-id": "pe-13.2_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13.2_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13.2_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13.2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-13.2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-13.2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-14", "adds": [ { "position": "ending", "by-id": "pe-14_smt", "parts": [ { "id": "pe-14_fr", "name": "item", "title": "PE-14 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "pe-14_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(a) Requirement:" } ], "prose": "The service provider measures temperature at server inlets and humidity levels by dew point." } ] } ] }, { "position": "starting", "by-id": "pe-14_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-14_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-14_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-14_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-14.2", "adds": [ { "position": "starting", "by-id": "pe-14.2_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-14.2_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-14.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-15", "adds": [ { "position": "starting", "by-id": "pe-15_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-15_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-15_obj-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-15_obj-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-15_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-15.1", "adds": [ { "position": "starting", "by-id": "pe-15.1_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-15.1_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-15.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-16", "adds": [ { "position": "starting", "by-id": "pe-16_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-16_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-16_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-16_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-16_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-16_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-16_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-17", "adds": [ { "position": "starting", "by-id": "pe-17_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-17_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-17_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-17_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-17_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-17_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-17_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-17_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-18", "adds": [ { "position": "starting", "by-id": "pe-18_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-18_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-2", "adds": [ { "position": "starting", "by-id": "pe-2_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-2_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-2_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-2_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-2_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-3", "adds": [ { "position": "starting", "by-id": "pe-3_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3_obj.d-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3_obj.d-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3_obj.g-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3_obj.g-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-3_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-3_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-3_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-3_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-3_smt.g", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-3", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "pe-3.1", "adds": [ { "position": "starting", "by-id": "pe-3.1_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3.1_obj.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-3.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-4", "adds": [ { "position": "starting", "by-id": "pe-4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-5", "adds": [ { "position": "starting", "by-id": "pe-5_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-6", "adds": [ { "position": "starting", "by-id": "pe-6_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-6_obj.b-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-6_obj.b-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-6_obj.c-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-6_obj.c-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-6_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-6_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-6_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-6.1", "adds": [ { "position": "starting", "by-id": "pe-6.1_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-6.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-6.4", "adds": [ { "position": "starting", "by-id": "pe-6.4_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-6.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-8", "adds": [ { "position": "starting", "by-id": "pe-8_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-8_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-8_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-8_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-8_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pe-8_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-8.1", "adds": [ { "position": "starting", "by-id": "pe-8.1_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-8.1_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-8.1_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pe-9", "adds": [ { "position": "starting", "by-id": "pe-9_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pe-9_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pl-1", "adds": [ { "position": "starting", "by-id": "pl-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "pl-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "pl-11", "adds": [ { "position": "starting", "by-id": "pl-11_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-11_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pl-2", "adds": [ { "position": "starting", "by-id": "pl-2_obj.a.1-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.1-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.1-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.1-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.1-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.1-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.4-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.4-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.5", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.6", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.7", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.8", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.9", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.10-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.10-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.11", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.12-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.12-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.13-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.13-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.14-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.14-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.15-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.a.15-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-2_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-2_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-2_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pl-4", "adds": [ { "position": "starting", "by-id": "pl-4_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-4_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-4_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-4_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-4_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-4_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-4_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-4_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pl-4.1", "adds": [ { "position": "starting", "by-id": "pl-4.1_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-4.1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-4.1_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-4.1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-4.1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-4.1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pl-8", "adds": [ { "position": "ending", "by-id": "pl-8_smt", "parts": [ { "id": "pl-8_fr", "name": "item", "title": "PL-8 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "pl-8_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "(b) Guidance:" } ], "prose": "Significant change is defined in NIST Special Publication 800-37 Revision 2, Appendix F." } ] } ] }, { "position": "starting", "by-id": "pl-8_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-8_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-8_obj.a.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-8_obj.a.4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-8_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-8_obj.c-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-8_obj.c-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-8_obj.c-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-8_obj.c-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-8_obj.c-5", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-8_obj.c-6", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-8_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-8_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "pl-8_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "pl-10", "adds": [ { "position": "ending", "by-id": "pl-10_smt", "parts": [ { "id": "pl-10_fr", "name": "item", "title": "PL-10 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "pl-10_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "Select the appropriate FedRAMP Baseline" } ] } ] }, { "position": "starting", "by-id": "pl-10_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "pl-10_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ps-1", "adds": [ { "position": "starting", "by-id": "ps-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "ps-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "ps-2", "adds": [ { "position": "starting", "by-id": "ps-2_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-2_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-2_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ps-3", "adds": [ { "position": "starting", "by-id": "ps-3_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-3_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ps-3.3", "adds": [ { "position": "starting", "by-id": "ps-3.3_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-3.3_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-3.3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-3.3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ps-4", "adds": [ { "position": "starting", "by-id": "ps-4_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-4_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-4_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-4_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-4_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-4_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-4_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-4_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-4_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-4_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ps-4.2", "adds": [ { "position": "starting", "by-id": "ps-4.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-4.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ps-5", "adds": [ { "position": "starting", "by-id": "ps-5_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-5_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-5_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-5_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-5_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-5_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-5_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-5_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ps-6", "adds": [ { "position": "starting", "by-id": "ps-6_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-6_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-6_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-6_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-6_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-6_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-6_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ps-7", "adds": [ { "position": "starting", "by-id": "ps-7_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-7_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-7_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-7_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-7_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-7_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-7_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-7_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-7_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-7_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ps-8", "adds": [ { "position": "starting", "by-id": "ps-8_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-8_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-8_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ps-8_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ps-9", "adds": [ { "position": "starting", "by-id": "ps-9_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ps-9_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ra-1", "adds": [ { "position": "starting", "by-id": "ra-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "ra-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "ra-2", "adds": [ { "position": "starting", "by-id": "ra-2_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-2_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-2_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-2_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ra-3", "adds": [ { "position": "ending", "by-id": "ra-3_smt", "parts": [ { "id": "ra-3_fr", "name": "item", "title": "RA-3 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ra-3_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Significant change is defined in NIST Special Publication 800-37 Revision 2, Appendix F." }, { "id": "ra-3_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(e) Requirement:" } ], "prose": "Include all Authorizing Officials; for JAB authorizations to include FedRAMP." } ] } ] }, { "position": "starting", "by-id": "ra-3_obj.a.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-3_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-3_obj.a.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-3_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-3_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-3_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-3_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-3_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-3_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-3_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-3_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-3_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ra-3.1", "adds": [ { "position": "starting", "by-id": "ra-3.1_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-3.1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-3.1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-3.1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ra-5", "adds": [ { "position": "ending", "by-id": "ra-5_smt", "parts": [ { "id": "ra-5_fr", "name": "item", "title": "RA-5 Additional FedRAMP Requirements and Guidance", "parts": [ { "id": "ra-5_fr_gdn.1", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "See the FedRAMP Documents page> Vulnerability Scanning Requirements https://www.FedRAMP.gov/documents/" }, { "id": "ra-5_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "(a) Requirement:" } ], "prose": "an accredited independent assessor scans operating systems/infrastructure, web applications, and databases once annually." }, { "id": "ra-5_fr_smt.2", "name": "item", "props": [ { "name": "label", "value": "(d) Requirement:" } ], "prose": "If a vulnerability is listed among the CISA Known Exploited Vulnerability (KEV) Catalog (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) the KEV remediation date supersedes the FedRAMP parameter requirement." }, { "id": "ra-5_fr_smt.3", "name": "item", "props": [ { "name": "label", "value": "(e) Requirement:" } ], "prose": "to include all Authorizing Officials; for JAB authorizations to include FedRAMP" }, { "id": "ra-5_fr_gdn.2", "name": "guidance", "props": [ { "name": "label", "value": "Guidance:" } ], "prose": "Informational findings from a scanner are detailed as a returned result that holds no vulnerability risk or severity and for FedRAMP does not require an entry onto the POA&M or entry onto the RET during any assessment phase.\n\nWarning findings, on the other hand, are given a risk rating (low, moderate, high or critical) by the scanning solution and should be treated like any other finding with a risk or severity rating for tracking purposes onto either the POA&M or RET depending on when the findings originated (during assessments or during monthly continuous monitoring). If a warning is received during scanning, but further validation turns up no actual issue then this item should be categorized as a false positive. If this situation presents itself during an assessment phase (initial assessment, annual assessment or any SCR), follow guidance on how to report false positives in the Security Assessment Report (SAR). If this situation happens during monthly continuous monitoring, a deviation request will need to be submitted per the FedRAMP Vulnerability Deviation Request Form.\n\nWarnings are commonly associated with scanning solutions that also perform compliance scans, and if the scanner reports a \\\"warning\\\" as part of the compliance scanning of a CSO, follow guidance surrounding the tracking of compliance findings during either the assessment phases (initial assessment, annual assessment or any SCR) or monthly continuous monitoring as it applies. Guidance on compliance scan findings can be found by searching on \\\"Tracking of Compliance Scans\\\" in FAQs." } ] } ] }, { "position": "starting", "by-id": "ra-5_obj.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5_obj.b.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5_obj.b.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5_obj.b.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5_obj.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-5_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-5_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-5_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-5_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-5_smt.f", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-5", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ra-5.11", "adds": [ { "position": "starting", "by-id": "ra-5.11_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5.11_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ra-5.2", "adds": [ { "position": "starting", "by-id": "ra-5.2_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5.2_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-5.2", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ra-5.3", "adds": [ { "position": "starting", "by-id": "ra-5.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5.3_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "ra-5.3", "props": [ { "name": "CORE", "ns": "https://fedramp.gov/ns/oscal", "value": "true" } ] } ] }, { "control-id": "ra-5.4", "adds": [ { "position": "starting", "by-id": "ra-5.4_obj-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5.4_obj-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5.4_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ra-5.5", "adds": [ { "position": "starting", "by-id": "ra-5.5_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5.5_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ra-5.8", "adds": [ { "position": "ending", "by-id": "ra-5.8_smt", "parts": [ { "id": "ra-5.8_fr", "name": "item", "title": "RA-5(8) Additional FedRAMP Requirement", "parts": [ { "id": "ra-5.8_fr_smt.1", "name": "item", "props": [ { "name": "label", "value": "Requirement:" } ], "prose": "This enhancement is required for all high (or critical) vulnerability scan findings." } ] } ] }, { "position": "starting", "by-id": "ra-5.8_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-5.8_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ra-7", "adds": [ { "position": "starting", "by-id": "ra-7_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-7_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "ra-9", "adds": [ { "position": "starting", "by-id": "ra-9_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "ra-9_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "sa-1", "adds": [ { "position": "starting", "by-id": "sa-1_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-1_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-1_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-1_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-1_obj.a.1.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-1_obj.a.1.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-1_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-1_obj.c.1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-1_obj.c.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-1_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] }, { "position": "starting", "by-id": "sa-1_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "sa-1_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point.", "remarks": "This response must address all control sub-statement requirements." } ] } ] }, { "control-id": "sa-11", "adds": [ { "position": "starting", "by-id": "sa-11_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11_obj.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11_obj.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11_obj.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11_obj.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "sa-11_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "sa-11_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "sa-11_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "sa-11_smt.e", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "sa-11.2", "adds": [ { "position": "starting", "by-id": "sa-11.2_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.a-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.a-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.b-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.b-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.b-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.b-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.c-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.c-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.d-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.d-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.d-3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_obj.d-4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-11.2_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "sa-11.2_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "sa-11.2_smt.c", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "sa-11.2_smt.d", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "sa-15", "adds": [ { "position": "starting", "by-id": "sa-15_obj.a.1-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-15_obj.a.1-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-15_obj.a.2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-15_obj.a.3", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-15_obj.a.4", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-15_obj.b-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-15_obj.b-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-15_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "sa-15_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "sa-15.3", "adds": [ { "position": "starting", "by-id": "sa-15.3_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "TEST", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-15.3_smt.a", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] }, { "position": "starting", "by-id": "sa-15.3_smt.b", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "sa-16", "adds": [ { "position": "starting", "by-id": "sa-16_obj", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-16_smt", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." } ] } ] }, { "control-id": "sa-17", "adds": [ { "position": "starting", "by-id": "sa-17_obj.a-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-17_obj.a-2", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-17_obj.b-1", "props": [ { "name": "response-point", "ns": "https://fedramp.gov/ns/oscal", "value": "You must fill in this response point." }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "EXAMINE", "class": "fedramp" }, { "name": "method", "ns": "https://fedramp.gov/ns/oscal", "value": "INTERVIEW", "class": "fedramp" } ] }, { "position": "starting", "by-id": "sa-17_obj.b-2", "props": [ { "name":