BaselineWatch
Desk

VDR-CSO-SIR Sampling

FedRAMP Consolidated Rules (2026) 2026.10.08.01 against 2026.10.05.01
All changes in this version
unchanged VDR: Vulnerability Detection and Response

Title

Sampling

Control

Providers MAY sample effectively identical information resources, especially machine-based information resources, when performing vulnerability detection UNLESS doing so would decrease the efficiency or effectiveness of vulnerability detection.