RA-5(2) Update Vulnerabilities to Be Scanned

Family RA

Baselines moderate

Mapped KSIs 2

Control statement

Update the system vulnerabilities to be scanned {{ insert: param, ra-05.02_odp.01 }}.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSI	Title	Category
KSI-AFR-04	Vulnerability Detection and Response Document the vulnerability detection and vulnerability response methodology used within the cloud service offering in alignment with the FedRAMP Vulnerability Detection and Response (VDR) process and persistently address all related requirements and recommendations.	Authorization by FedRAMP
KSI-AFR-05	Significant Change Notifications Determine how significant changes will be tracked and how all necessary parties will be notified in alignment with the FedRAMP Significant Change Notifications (SCN) process and persistently address all related requirements and recommendations.	Authorization by FedRAMP