Connectsecure Vulnerability And Compliance Manager Trust Center

We take security, compliance, and privacy seriously. Explore our certifications, reports, and policies in one place.

⌘K

Compliance Programs

The ongoing systems ConnectSecure maintains to stay secure and prove it—covering the policies, processes, and tools that ensure regulatory and security requirements are consistently met.

ConnectSecure

Controls

See All (77)

Controls are the specific safeguards or security requirements put in place to reduce risk and protect systems, data, and operations.

AFC-CSO-CRA

Pass

Providers MUST complete the required actions in Emergency or Emergency Test designated messages sent by FedRAMP within the timeframe included in the message.

AFC-CSO-INB

Pass

Providers MUST establish and maintain an email address to receive messages from FedRAMP; this inbox is a FedRAMP Security Inbox (FSI). • Unless otherwise notified, FedRAMP will use the listed Security Email on the Marketplace for these notifications. • If a provider establishes a new inbox in reaction to this guidance that is different from the Security Email then they must follow the AFC-CSO-NOC (Notification of Changes) rules to notify FedRAMP.

AFC-CSO-NOC

Pass

Providers MUST immediately notify FedRAMP of any changes to the email address for their FedRAMP Security Inbox.

Deliverables

See All (2)

The evidence packages that demonstrate ConnectSecure has implemented required controls and is maintaining compliance.

ConnectSecure_CSO.json

JSON File 20260908

Download

ConnectSecure_CSO.pdf

Human Readable Overview Package