BaselineWatch
Desk

VER-RPT-PER Persistent Reporting

FedRAMP Consolidated Rules (2026) 2026.07.14.01
All changes in this version
first version loaded VER: Vulnerability Evaluation and Reporting

Title

Persistent Reporting

Control

Providers MUST report vulnerability detection and response activity (including persistent verification and validation) to all necessary parties persistently, summarizing ALL activity since the previous report; these reports are FedRAMP Certification Data and are subject to FedRAMP Certification Data Sharing rules.