FRD-SDR Security Decision Record (SDR)
FedRAMP Consolidated Rules (2026) 2026.10.08.01 against 2026.10.05.01
All changes in this version
All changes in this version
Title
Security Decision Record (SDR)
Control
A persistently maintained, verified, and validated record of the security decisions made by a provider over the lifecycle of a cloud service offering. The Security Decision Record replaces the traditional System Security Plan and documents how applicable FedRAMP Practices are addressed, including implementation rationale, resulting customer risk, assessment findings, and supporting artifacts.