Skip to main content
Pricing
Sign inGet started
FRR-VER

Vulnerability Evaluation and Reporting

The Vulnerability Evaluation and Reporting rules require cloud service providers to determine when vulnerabilities are likely to impact federal customers and report the status of such vulnerabilities to all necessary parties.

19 provider requirements across 3 subsets.

EVA

Evaluation

These rules apply to the evaluation of vulnerabilities.

RPT

Reporting

These rules apply to reporting related to vulnerability detection and response.

TFR

Timeframes

These rules apply to timeframes for vulnerability detection and response.