IEC-CSO-DPR Default PAIN Rating
FedRAMP Consolidated Rules (2026) 2026.07.14.01
All changes in this version
All changes in this version
Title
Default PAIN Rating
Control
Providers MUST treat FedRAMP Reportable Incidents as if they have a Potential Agency Impact N-rating (PAIN) of 5 UNLESS they promptly estimate the PAIN rating following the rule in IEC-CSO-EFI (Estimate Federal Impact).
Related controls
iec-cso-efi