CPO-CSF-CPMCertification Package Maintenance for Rev5
rev5varies by class: b, c, d
The statement for this requirement varies by certification class — see the per-class deadlines below.
Who it binds
Deadlines (3)
| Class | Timeframe | Statement |
|---|---|---|
| D | 6 months | Providers with Rev5 Class D Certifications MUST persistently maintain their FedRAMP Certification Package to ensure it is up to date and complete at least once every six months. |
| B | 1 year | Providers with Rev5 Class B Certifications MUST persistently maintain their FedRAMP Certification Package to ensure it is up to date and complete at least once every year. |
| C | 1 year | Providers with Rev5 Class C Certifications MUST persistently maintain their FedRAMP Certification Package to ensure it is up to date and complete at least once every year. |
Which certifications it binds
- Certification type
- 20x · Rev5 — this subset states no type restriction
- Path
- Program · Agency — this subset states no path restriction
Evidence this requirement demands
No requirement-specific artifacts — but the defaults below still apply.
5 default artifacts owed by every FRR requirement
- Explanation of how the rule is followed, or an explanation of the reason and resulting risk to customers for not following the rule.
- Verification that the implementation is appropriate for the rule, or that the reason for not implementing is accepted by a senior official.
- Validation that the implementation is in place and working as intended, or that the reason for not implementing is accepted by a senior official.
- Independent verification.
- Independent validation.
Group rev5, subset CSF of Certification Package Overview. See all obligations on /obligations or the full evidence plan on /evidence.