FRR-SCG

Secure Configuration Guide

The Secure Configuration Guide rules help agencies and other customers understand how to configure a cloud service offering securely. These rules require providers to clearly explain the security impact of common settings so customers can make informed configuration choices.

9 provider requirements across 2 subsets.

CSO

General Provider Responsibilities

These rules apply to providers with FedRAMP Certifications of any type.

SCG-CSO-RSC
Recommended Secure Configuration
MUST
SCG-CSO-AUP
Use Instructions
MUST
SCG-CSO-PUB
Public Secure Configuration Guidance
SHOULD
SCG-CSO-SDF
Secure Defaults
SHOULD

ENH

Enhanced Capabilities

These recommendations apply to providers with FedRAMP Certifications of any type.

SCG-ENH-CMP
Comparison Capability
SHOULD
SCG-ENH-EXP
Export Capability
SHOULD
SCG-ENH-API
API Capability
SHOULD
SCG-ENH-MRG
Machine-Readable Guidance
SHOULD
SCG-ENH-VRH
Versioning and Release History
SHOULD