BaselineWatch
Desk

VER-EVA-AIA Assume It's Automatable

FedRAMP Consolidated Rules (2026) 2026.10.08.01 against 2026.10.05.01
All changes in this version
unchanged VER: Vulnerability Evaluation and Reporting

Title

Assume It's Automatable

Control

Providers MUST assume the exploitation of vulnerabilities can be automated UNLESS they have evidence proving otherwise.