SecurITPosture

Resources

References we use on engagements

Short, specific documents for people preparing a FedRAMP package. Useful whether or not you ever use the platform.

01

Available soon

  • Rev 5 evidence checklist

    Every artifact a Moderate package needs, grouped by the evidence categories the platform uses, with the control families each one supports.

    To addAuthor the checklist, export as PDF and CSV, and decide whether it is gated behind the demo form.

  • POA&M column reference

    The thirty two POA&M columns, what each one means, which are required by the FedRAMP template, and common mistakes.

    To addAuthor from the POA&M worksheet spec and the FedRAMP template.

  • What a 3PAO will ask for

    The first twenty requests an assessor makes in a Moderate assessment, in the order they usually arrive.

    To addAuthor from assessment experience. Named author preferred.