Skip to content
FedRAMP Rules Hub
JSON — GET /api/baseline

Keyboard shortcuts

Go

  • Scope — the control cataloggm
  • Plan — your last certification classgp
  • Collect — the recipe indexgc
  • The control you are workinggw
  • Startgh

Move

  • Next rowj
  • Previous rowk
  • Previous in this run[
  • Next in this run]
  • Filter this page's list/
  • Search everything⌘K

Act

  • Copy this page's permalinky
  • Toggle dark moded
  • This sheet?

Rows are whatever the current page lists — controls on Scope, recipes on Plan and Collect.

Class C scope322 controls · 18 families

JSON — GET /api/baseline

Every control in the class C Rev5 baseline, and what proves it. Baseline membership is FedRAMP Rev5; evidence status is our authored AWS and pipeline overlays (AWS overlay v3.0.0, pipeline overlay v0.8.0).

Evidencecontrols in the class C baseline

with a recipe
94 of 322
KSI-reached, no recipe
105 of 322the authoring backlog
orphan → narrative
123 of 322no telemetry will ever prove these — narrative means a document you write

Control index

evidence

322 controls

legend
recipe— an authored recipe collects evidence for this controlKSI only— a Key Security Indicator reaches it, but no recipe is authored yetorphan— no Key Security Indicator reaches it — a person writes it up instead = in the class B, C and D baselines, left to right
where do the control titles come from?

The FedRAMP rules reference NIST 800-53 controls by id only — no title text is in that dataset. The titles here are NIST’s own, read from a pinned commit of the OSCAL catalog that usnistgov/oscal-content publishes, and the full statement is on each control’s page. Hover a row to read its title; the KSI column still shows what reaches the control, which is the thing that decides what you have to do about it.

AC43 in scope · 16 covered

AT6 in scope · 0 covered

AU16 in scope · 11 covered

CA13 in scope · 1 covered

CM27 in scope · 14 covered

CP23 in scope · 3 covered

IA27 in scope · 6 covered

IR17 in scope · 10 covered

MA10 in scope · 0 covered

  • MA-01 — Policy and ProceduresIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MA-02 — Controlled MaintenanceIn baseline CKSI onlyKSI-CMT-LMC KSI-SVC-EIS
  • MA-03 — Maintenance ToolsIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MA-03 (01) — Inspect ToolsIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MA-03 (02) — Inspect MediaIn baseline Corphan—annual — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MA-03 (03) — Prevent Unauthorized RemovalIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MA-04 — Nonlocal MaintenanceIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MA-05 — Maintenance PersonnelIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MA-05 (01) — Individuals Without Appropriate AccessIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MA-06 — Timely MaintenanceIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.

MP7 in scope · 0 covered

  • MP-01 — Policy and ProceduresIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MP-02 — Media AccessIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MP-03 — Media MarkingIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MP-04 — Media StorageIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MP-05 — Media TransportIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MP-06 — Media SanitizationIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • MP-07 — Media UseIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.

PE19 in scope · 0 covered

  • PE-01 — Policy and ProceduresIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-02 — Physical Access AuthorizationsIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-03 — Physical Access ControlIn baseline Corphan—annual — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-04 — Access Control for TransmissionIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-05 — Access Control for Output DevicesIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-06 — Monitoring Physical AccessIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-06 (01) — Intrusion Alarms and Surveillance EquipmentIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-08 — Visitor Access RecordsIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-09 — Power Equipment and CablingIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-10 — Emergency ShutoffIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-11 — Emergency PowerIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-12 — Emergency LightingIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-13 — Fire ProtectionIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-13 (01) — Detection Systems — Automatic Activation and NotificationIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-13 (02) — Suppression Systems — Automatic Activation and NotificationIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-14 — Environmental ControlsIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-15 — Water Damage ProtectionIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-16 — Delivery and RemovalIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PE-17 — Alternate Work SiteIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.

PL7 in scope · 0 covered

  • PL-01 — Policy and ProceduresIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PL-02 — System Security and Privacy PlansIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PL-04 — Rules of BehaviorIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PL-04 (01) — Social Media and External Site/Application Usage RestrictionsIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.
  • PL-08 — Security and Privacy ArchitecturesIn baseline CKSI onlyKSI-PIY-RSD KSI-SVC-EIS
  • PL-10 — Baseline SelectionIn baseline CKSI onlyKSI-CNA-IBP KSI-SVC-ACM
  • PL-11 — Baseline TailoringIn baseline Corphan— — No page: no KSI reaches this control, so there is nothing to show beyond its baseline membership.

PS10 in scope · 2 covered

RA11 in scope · 1 covered

SA21 in scope · 4 covered

SC29 in scope · 13 covered

SI24 in scope · 10 covered

SR12 in scope · 3 covered