VER-EVA-AIA Assume It's Automatable
FedRAMP Consolidated Rules (2026) 2026.10.13.01 against 2026.10.08.01
All changes in this version
All changes in this version
Title
Assume It's Automatable
Control
Providers MUST assume the exploitation of vulnerabilities can be automated UNLESS they have evidence proving otherwise.