# VDR-TFR-MVX — Persistent Machine Verification and Validation for 20x

> FedRAMP Consolidated Rules for 2026 v2026.07.14.01 · updated 2026-07-14
> Canonical page: /requirement/vdr-tfr-mvx

Vulnerability Detection and Response (`VDR`) · group 20x · subset TFR
Force: none stated

## Statement

_No statement text is recorded for this requirement._

## Who it binds

- Providers

## Certification classes

- class A
- class B
- class C

## Which certifications it binds

Certification type: 20x, Rev5
Path: Program, Agency

## Machine-readable form

_This requirement names no JSON schema. FRC-CSO-JSN binds a provider to a schema only where a rule contains one._

## Artifacts

_No requirement-specific artifact is named._

## Timeframes

- {"requirementId":"VDR-TFR-MVX","documentKey":"VDR","documentName":"Vulnerability Detection and Response","group":"20x","subset":"TFR","name":"Persistent Machine Verification and Validation for 20x","statement":"Providers of FedRAMP 20x Class C offerings MUST verify and validate the status of machine-based information resources at least once every 3 days.","force":"MUST","affects":["Providers"],"class":"c","num":3,"type":"days","sortKey":72}
- {"requirementId":"VDR-TFR-MVX","documentKey":"VDR","documentName":"Vulnerability Detection and Response","group":"20x","subset":"TFR","name":"Persistent Machine Verification and Validation for 20x","statement":"Providers of FedRAMP 20x Class B offerings MUST verify and validate the status of machine-based information resources at least once every 7 days.","force":"MUST","affects":["Providers"],"class":"b","num":7,"type":"days","sortKey":168}
- {"requirementId":"VDR-TFR-MVX","documentKey":"VDR","documentName":"Vulnerability Detection and Response","group":"20x","subset":"TFR","name":"Persistent Machine Verification and Validation for 20x","statement":"Providers of FedRAMP 20x Class A offerings SHOULD verify and validate the status of machine-based information resources at least once every month.","force":"SHOULD","affects":["Providers"],"class":"a","num":1,"type":"months","sortKey":730.5}

## Notifications

_This requirement demands no notification._