PL-4(1) Social Media and External Site/Application Usage Restrictions

Family PL

Baselines moderate

Mapped KSIs 1

Control statement

Include in the rules of behavior, restrictions on:
    (a) Use of social media, social networking sites, and external sites/applications;
    (b) Posting organizational information on public websites; and
    (c) Use of organization-provided identifiers (e.g., email addresses) and authentication secrets (e.g., passwords) for creating accounts on external sites/applications.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSI	Title	Category
KSI-AFR-01	Minimum Assessment Scope Apply the FedRAMP Minimum Assessment Scope (MAS) to identify and document the scope of the cloud service offering to be assessed for FedRAMP authorization and persistently address all related requirements and recommendations.	Authorization by FedRAMP