FedRAMP Controls / CP

CP-9(8) Cryptographic Protection

Family CP
Baselines moderate
Mapped KSIs 1

Control statement

Implement cryptographic mechanisms to prevent unauthorized disclosure and modification of {{ insert: param, cp-09.08_odp }}.
        Guidance: Note that this enhancement requires the use of cryptography which must be compliant with Federal requirements and utilize FIPS validated or NSA approved cryptography (see SC-13.)

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSITitleCategory
KSI-SVC-02Network Encryption
Encrypt or otherwise secure network traffic.
Service Configuration