CDS-UTC-AADAgency Access Denial
allMUST
Providers MUST notify FedRAMP within 5 business days of denying an agency access request for FedRAMP Certification Data.
Who it binds
Deadlines (1)
| Class | Timeframe | Statement |
|---|---|---|
| all | 5 business days | Providers MUST notify FedRAMP within 5 business days of denying an agency access request for FedRAMP Certification Data. |
Notifications (1)
- FedRAMPvia form: https://help.fedramp.gov/hc/en-us/requests/new?ticket_form_id=51829826617243
Which certifications it binds
- Certification type
- 20x · Rev5
- Path
- Program · Agency
Evidence this requirement demands
No requirement-specific artifacts — but the defaults below still apply.
5 default artifacts owed by every FRR requirement
- Explanation of how the rule is followed, or an explanation of the reason and resulting risk to customers for not following the rule.
- Verification that the implementation is appropriate for the rule, or that the reason for not implementing is accepted by a senior official.
- Validation that the implementation is in place and working as intended, or that the reason for not implementing is accepted by a senior official.
- Independent verification.
- Independent validation.
Group all, subset UTC of Certification Data Sharing. See all obligations on /obligations or the full evidence plan on /evidence.