BaselineWatch
Desk

IEC-CSO-DPR Default PAIN Rating

FedRAMP Consolidated Rules (2026) 2026.10.13.01 against 2026.10.08.01
All changes in this version
unchanged IEC: Incident Evaluation and Communication

Title

Default PAIN Rating

Control

Providers MUST treat FedRAMP Reportable Incidents as if they have a Potential Agency Impact N-rating (PAIN) of 5 UNLESS they promptly estimate the PAIN rating following the rule in IEC-CSO-EFI (Estimate Federal Impact).

Related controls

iec-cso-efi