💼 CA-8 Penetration Testing (L)(M)(H)
- Contextual name: 💼 CA-8 Penetration Testing (L)(M)(H)
- ID:
/frameworks/fedramp-high-security-controls/ca/08 - Located in: 💼 Assessment, Authorization, and Monitoring
Description​
Conduct penetration testing [FedRAMP Assignment: at least annually] on [Assignment: organization-defined systems or system components].
CA-8 Additional FedRAMP Requirements and Guidance:
Guidance: Reference the FedRAMP Penetration Test Guidance.
Similar​
- Sections
/frameworks/nist-sp-800-53-r5/ca/08
- Internal
- ID:
dec-c-bbaaecb7
- ID:
Similar Sections (Take Policies From)​
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 NIST SP 800-53 Revision 5 → 💼 CA-8 Penetration Testing | 3 |
Similar Sections (Give Policies To)​
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 FedRAMP Low Security Controls → 💼 CA-8 Penetration Testing (L)(M)(H) | ||||
| 💼 FedRAMP Moderate Security Controls → 💼 CA-8 Penetration Testing (L)(M)(H) | 2 |
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 CA-8(1) Independent Penetration Testing Agent or Team (M)(H) | ||||
| 💼 CA-8(2) Red Team Exercises (M)(H) |