Skip to main content
Pricing
Sign inRequest demo
FRR-VDR

Vulnerability Detection and Response

The Vulnerability Detection and Response rules require providers to continuously identify, analyze, prioritize, mitigate, and remediate vulnerabilities and related exposures through automated systems. These rules give providers flexibility in implementation while ensuring agencies receive the information needed to support ongoing authorization decisions.

17 provider requirements across 2 subsets.

CSO

General Provider Responsibilities

These rules apply to all providers with FedRAMP Certifications of any type.

TFR

Timeframes

These rules apply to timeframes for vulnerability detection and response.