💼 Assessment, Authorization, and Monitoring
- ID:
/frameworks/fedramp-moderate-security-controls/ca
Description​
Empty...
Similar​
- Internal
- ID:
dec-b-92a3b16f
- ID:
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 CA-1 Policy and Procedures (L)(M)(H) | no data | ||||
| 💼 CA-2 Control Assessments (L)(M)(H) | 2 | no data | |||
|  💼 CA-2(1) Independent Assessors (L)(M)(H) | no data | ||||
|  💼 CA-2(3) Leveraging Results from External Organizations (M)(H) | no data | ||||
| 💼 CA-3 Information Exchange (L)(M)(H) | no data | ||||
| 💼 CA-5 Plan of Action and Milestones (L)(M)(H) | no data | ||||
| 💼 CA-6 Authorization (L)(M)(H) | no data | ||||
| 💼 CA-7 Continuous Monitoring (L)(M)(H) | 2 | 13 | no data | ||
|  💼 CA-7(1) Independent Assessment (M)(H) | no data | ||||
|  💼 CA-7(4) Risk Monitoring (L)(M)(H) | no data | ||||
| 💼 CA-8 Penetration Testing (L)(M)(H) | 2 | no data | |||
|  💼 CA-8(1) Independent Penetration Testing Agent or Team (M)(H) | no data | ||||
|  💼 CA-8(2) Red Team Exercises (M)(H) | no data | ||||
| 💼 CA-9 Internal System Connections (L)(M)(H) | 1 | no data |