Controls

We take security, compliance, and privacy seriously. Explore our certifications, reports, and policies in one place.

⌘K

20x Class B

AFC-CSO-ACK

Pass

Providers SHOULD promptly and automatically acknowledge the receipt of messages received from FedRAMP in their FedRAMP Security Inbox.

AFC-CSO-CRA

Pass

Providers MUST complete the required actions in Emergency or Emergency Test designated messages sent by FedRAMP within the timeframe included in the message.

AFC-CSO-EMR

Pass

Providers MUST route Emergency designated messages sent by FedRAMP to a senior security official for their awareness.