VER-RPT-PER Persistent Reporting
FedRAMP Consolidated Rules (2026) 2026.07.14.01
All changes in this version
All changes in this version
Title
Persistent Reporting
Control
Providers MUST report vulnerability detection and response activity (including persistent verification and validation) to all necessary parties persistently, summarizing ALL activity since the previous report; these reports are FedRAMP Certification Data and are subject to FedRAMP Certification Data Sharing rules.