VDR-CSO-AKE Avoid KEVs
FedRAMP Consolidated Rules (2026) 2026.07.14.01
All changes in this version
All changes in this version
Title
Avoid KEVs
Control
Providers SHOULD NOT deploy or otherwise activate new machine-based information resources with Known Exploited Vulnerabilities.