AGU-USE-NFCNotify FedRAMP of Monitoring Concerns
allMUST
Agencies MUST notify FedRAMP if information presented in an Ongoing Certification Report, Quarterly Review, or other FedRAMP Certification Data causes significant concerns for the authorizing official that would likely result in rescission of their Authorization to Operate.
Who it binds
Notifications (1)
- FedRAMPvia form: https://help.fedramp.gov/hc/en-us/requests/new?ticket_form_id=51821301979547
Which certifications it binds
- Certification type
- 20x · Rev5
- Path
- Program · Agency
Evidence this requirement demands
No requirement-specific artifacts — but the defaults below still apply.
5 default artifacts owed by every FRR requirement
- Explanation of how the rule is followed, or an explanation of the reason and resulting risk to customers for not following the rule.
- Verification that the implementation is appropriate for the rule, or that the reason for not implementing is accepted by a senior official.
- Validation that the implementation is in place and working as intended, or that the reason for not implementing is accepted by a senior official.
- Independent verification.
- Independent validation.
Group all, subset USE of Agency Use of FedRAMP Certified Cloud Services. See all obligations on /obligations or the full evidence plan on /evidence.