Control statement
Employ independent assessors or assessment teams to conduct control assessments.
Requirement: For JAB Authorization, must use an accredited 3PAO. Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is
preserved in the catalog database.
Covered by these Key Security Indicators
| KSI | Title | Category |
|---|---|---|
| KSI-CNA-08 | Automated Enforcement Use automated services to persistently assess the security posture of all machine-based information resources and automatically enforce their intended operational state. | Cloud Native Architecture |