CDS-TRC-ACLMUSTAll frameworksImplementation guide coming soonAccess Logging
Certification Data Sharing (CDS) · FedRAMP-Compatible Trust Centers
Applies to: Providers
- Who this applies to
- Providers
- Service class
- All service classes
- Force
- MUST
- Timeframe
- No fixed timeframe
Reviewed implementation guidance for CDS-TRC-ACL is not published yet. The official source below remains complete and authoritative.
Expected evidence artifacts
- Explanation of how the appropriate parties can obtain this log information.
Official FedRAMP source
Verbatim from FedRAMP/rules
Trust centers MUST log access to FedRAMP Certification Data and store summaries of access for at least six months; such information, as it pertains to specific parties, SHOULD be made available upon request by those parties.
Defined terms in this requirement
Change history
2026-05-04Initial reset for the Consolidated Rules for 2026 Public Preview.
Content provenance
Official requirement text is sourced from FedRAMP/rules . Boundera implementation guidance has not been fully reviewed for this item.