Reference Β· FedRAMP

Rev 5 Moderate Controls Catalog

The FedRAMP Rev 5 Moderate baseline, browsable and searchable, mapped to the 20x Key Security Indicators. This is the same catalog the Novaprospect audit suite evaluates AWS environments against.

323 controls
72 KSIs mapped
18 families
Generated 2026-05-25T21:31:04Z
Showing 323 of 323 controls

AC β€” Access Control

43 controls

ControlTitleKSIs
AC-1Policy and Procedures2
AC-11Device Lockβ€”
AC-11(1)Pattern-hiding Displaysβ€”
AC-12Session Termination2
AC-14Permitted Actions Without Identification or Authentication1
AC-17Remote Access2
AC-17(1)Monitoring and Control3
AC-17(2)Protection of Confidentiality and Integrity Using Encryption3
AC-17(3)Managed Access Control Points5
AC-17(4)Privileged Commands and Accessβ€”
AC-18Wireless Accessβ€”
AC-18(1)Authentication and Encryption1
AC-18(3)Disable Wireless Networking1
AC-19Access Control for Mobile Devicesβ€”
AC-19(5)Full Device or Container-based Encryptionβ€”
AC-2Account Management5
AC-2(1)Automated System Account Management2
AC-2(12)Account Monitoring for Atypical Usageβ€”
AC-2(13)Disable Accounts for High-risk Individuals2
AC-2(2)Automated Temporary and Emergency Account Management3
AC-2(3)Disable Accounts3
AC-2(4)Automated Audit Actions4
AC-2(5)Inactivity Logout1
AC-2(7)Privileged User Accountsβ€”
AC-2(9)Restrictions on Use of Shared and Group Accountsβ€”
AC-20Use of External Systems3
AC-20(1)Limits on Authorized Use5
AC-20(2)Portable Storage Devices β€” Restricted Useβ€”
AC-21Information Sharing1
AC-22Publicly Accessible Contentβ€”
AC-3Access Enforcement4
AC-4Information Flow Enforcement4
AC-4(21)Physical or Logical Separation of Information Flowsβ€”
AC-5Separation of Duties3
AC-6Least Privilege2
AC-6(1)Authorize Access to Security Functions1
AC-6(10)Prohibit Non-privileged Users from Executing Privileged Functions1
AC-6(2)Non-privileged Access for Nonsecurity Functions1
AC-6(5)Privileged Accounts2
AC-6(7)Review of User Privileges2
AC-6(9)Log Use of Privileged Functions3
AC-7Unsuccessful Logon Attempts2
AC-8System Use Notificationβ€”

MP β€” Media Protection

7 controls