Controls

We take security, compliance, and privacy seriously. Explore our certifications, reports, and policies in one place.

⌘K

20x Class C

AFC-CSO-ACK

Pass

Providers SHOULD promptly and automatically acknowledge the receipt of messages received from FedRAMP in their FedRAMP Security Inbox.

AFC-CSO-CRA

Planned

Providers MUST complete the required actions in Emergency or Emergency Test designated messages sent by FedRAMP within the timeframe included in the message.

AFC-CSO-EMR

Fail

Providers MUST route Emergency designated messages sent by FedRAMP to a senior security official for their awareness.