BaselineWatch
5 versions
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

FedRAMP Consolidated Rules (2026)

FRR rules, KSI indicators, FRD definitions and CTL parameter selections, each with FedRAMP's dated change notes. Published at https://github.com/FedRAMP/rules. Source · US Government work, public domain.

Where this comes fromBaseline · US federal civilian, Private business

Published by FedRAMP (GSA). The low, moderate and high baselines a cloud service must meet to be authorised for federal use, as 800-53 controls plus FedRAMP's own parameters.

Derives from
NIST SP 800-53B, OMB Circular A-130
At the publisher
The same step, another body
NIST SP 800-53B, CNSSI 1253, DISA Security Requirements Guides, NASA-SPEC-2600 (ASCS), macOS Security Compliance Project — the other answers to the same job, on Learn

rules 5 versions

VersionPublishedRequirementsAgainst the previous versionLoaded
2026.10.13.01 2026-10-13 430 73 with discussion or related-control updates 15 Oct
2026.10.08.01 2026-10-08 430 1 revised 15 Oct
2026.10.05.01 2026-10-05 430 3 revised, 1 with discussion or related-control updates 15 Oct
2026.09.13.02 2026-09-13 430 5 added, 1 revised, 220 with discussion or related-control updates 15 Oct
2026.07.14.01 2026-07-14 425 first version loaded 15 Oct