Why How It Works Features Pricing Blog

Sign in Request demo

Key Security Indicator Atlas

FedRAMP 20x groups requirements into themed Key Security Indicator (KSI) families. Browse a family below to see every indicator in it, with Boundera's implementation guidance.

CED

Cybersecurity Education

(1)

Reviewing All Training

CMT

Change Management

(4)

Logging Changes

Redeploying vs Modifying

Reviewing Change Procedures

Validating Throughout Deployment

CNA

Cloud-Native Architecture

(8)

Defining Functionality and Privileges

Enforcing Intended State

Implementing Best Practices

Minimizing Attack Surface

Optimizing for Availability

Restricting Network Traffic

Reviewing Protections

Using Logical Networking

IAM

Identity and Access Management

(6)

Automating Account Management

Adopting Passwordless Methods

Ensuring Least Privilege

Authorizing Just-in-Time

Securing Non-User Authentication

Responding to Suspicious Activity

INR

Incident Response

(3)

Generating After Action Reports

Reviewing Incident Response Procedures

Reviewing Past Incidents

MLA

Monitoring, Logging, and Auditing

(5)

Authorizing Log Access

Evaluating Configurations

Logging Event Types

Operating SIEM Capability

PIY

Policy and Inventory

(5)

Generating Inventories

Reviewing Executive Support

Reviewing Investments in Security

Reviewing Security in the SDLC

Reviewing Vulnerability Disclosures

RPL

Recovery Planning

(4)

Aligning Backups with Objectives

Aligning Recovery Plan

Reviewing Recovery Objectives

Testing Recovery Capabilities

SCR

Supply Chain Risk Management

(2)

Mitigating Supply Chain Risk

Monitoring Supply Chain Risk

SVC

Service Configuration

(8)

Automating Configuration Management

Automating Secret Management

Evaluating and Improving Security

Preventing Residual Risk

Removing Unwanted Data

Securing Network Traffic

Validating Communications

Validating Resource Integrity