BaselineWatch
Desk

VDR-CSO-AKE Avoid KEVs

FedRAMP Consolidated Rules (2026) 2026.10.05.01 against 2026.09.13.02
All changes in this version
unchanged VDR: Vulnerability Detection and Response

Title

Avoid KEVs

Control

Providers SHOULD NOT deploy or otherwise activate new machine-based information resources with Known Exploited Vulnerabilities.