BaselineWatch
Desk

FRD-SDR Security Decision Record (SDR)

FedRAMP Consolidated Rules (2026) 2026.10.08.01 against 2026.10.05.01
All changes in this version
unchanged FRD: Definitions

Title

Security Decision Record (SDR)

Control

A persistently maintained, verified, and validated record of the security decisions made by a provider over the lifecycle of a cloud service offering. The Security Decision Record replaces the traditional System Security Plan and documents how applicable FedRAMP Practices are addressed, including implementation rationale, resulting customer risk, assessment findings, and supporting artifacts.