💼 CA-8 Penetration Testing (L)(M)(H)

• Contextual name: 💼 CA-8 Penetration Testing (L)(M)(H)
• ID: /frameworks/fedramp-moderate-security-controls/ca/08
• Located in: 💼 Assessment, Authorization, and Monitoring

Description

Conduct penetration testing [FedRAMP Assignment: at least annually] on [Assignment: organization-defined systems or system components].

CA-8 Additional FedRAMP Requirements and Guidance:

Guidance: Reference the FedRAMP Penetration Test Guidance.

Similar

• Sections
  • /frameworks/fedramp-high-security-controls/ca/08
• Internal
  • ID: dec-c-bbaaecb7

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 FedRAMP High Security Controls → 💼 CA-8 Penetration Testing (L)(M)(H)	2

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 CA-8(1) Independent Penetration Testing Agent or Team (M)(H)
💼 CA-8(2) Red Team Exercises (M)(H)