Skip to main content
Pricing
Sign inRequest demo

FedRAMP 20x for cloud service providers

Know what is required. Build it. Prove it.

Search every KSI and the 168 rules addressed to providers. See the requirement, implementation guidance, and evidence context without sorting through obligations owned by agencies, assessors, or FedRAMP. Not sure where you stand? Take the free FedRAMP 20x gap assessment to find your certification class and KSI readiness first.

Understand the 46 KSIsBrowse CSP rulesFind implementation guidanceFind automated checks

Based on FedRAMP/rules 2026.07.06.01, updated 2026-07-06

CSP implementation explorer

Showing 35 of 284 CSP resources

KSICMT
KSI-CMT-LMC

Logging Changes

All service classesImplementation guidance
KSICMT
KSI-CMT-RMV

Redeploying vs Modifying

All service classesImplementation guidance
KSICMT
KSI-CMT-RVP

Reviewing Change Procedures

All service classesImplementation guidance
KSICMT
KSI-CMT-VTD

Validating Throughout Deployment

All service classesImplementation guidance
KSICNA
KSI-CNA-DFP

Defining Functionality and Privileges

All service classesImplementation guidance
KSICNA
KSI-CNA-EIS

Enforcing Intended State

Classes B, CImplementation guidance
KSICNA
KSI-CNA-IBP

Implementing Best Practices

All service classesImplementation guidance
KSICNA
KSI-CNA-MAT

Minimizing Attack Surface

All service classesImplementation guidance
KSICNA
KSI-CNA-OFA

Optimizing for Availability

All service classesImplementation guidance
KSICNA
KSI-CNA-RNT

Restricting Network Traffic

All service classesImplementation guidance
KSICNA
KSI-CNA-RVP

Reviewing Protections

All service classesImplementation guidance
KSICNA
KSI-CNA-ULN

Using Logical Networking

All service classesImplementation guidance
KSIIAM
KSI-IAM-AAM

Automating Account Management

All service classesImplementation guidance
KSIIAM
KSI-IAM-APM

Adopting Passwordless Methods

All service classesImplementation guidance
KSIIAM
KSI-IAM-ELP

Ensuring Least Privilege

All service classesImplementation guidance
KSIIAM
KSI-IAM-JIT

Authorizing Just-in-Time

All service classesImplementation guidance
KSIIAM
KSI-IAM-SNU

Securing Non-User Authentication

All service classesImplementation guidance
KSIIAM
KSI-IAM-SUS

Responding to Suspicious Activity

All service classesImplementation guidance
KSIMLA
KSI-MLA-ALA

Authorizing Log Access

Classes B, CImplementation guidance
KSIMLA
KSI-MLA-EVC

Evaluating Configurations

All service classesImplementation guidance Automated check
KSIMLA
KSI-MLA-LET

Logging Event Types

All service classesImplementation guidance
KSIMLA
KSI-MLA-OSM

Operating SIEM Capability

All service classesImplementation guidance
KSIMLA
KSI-MLA-RVL

Reviewing Logs

All service classesImplementation guidance
KSIPIY
KSI-PIY-GIV

Generating Inventories

All service classesImplementation guidance
KSIRPL
KSI-RPL-ABO

Aligning Backups with Objectives

All service classesImplementation guidance
KSIRPL
KSI-RPL-TRC

Testing Recovery Capabilities

All service classesImplementation guidance
KSISCR
KSI-SCR-MIT

Mitigating Supply Chain Risk

All service classesImplementation guidance
KSISCR
KSI-SCR-MON

Monitoring Supply Chain Risk

All service classesImplementation guidance
KSISVC
KSI-SVC-ACM

Automating Configuration Management

All service classesImplementation guidance
KSISVC
KSI-SVC-ASM

Automating Secret Management

All service classesImplementation guidance
KSISVC
KSI-SVC-EIS

Evaluating and Improving Security

All service classesImplementation guidance
KSISVC
KSI-SVC-PRR

Preventing Residual Risk

Classes B, CImplementation guidance
KSISVC
KSI-SVC-SIN

Securing Information

All service classesImplementation guidance
KSISVC
KSI-SVC-VCM

Validating Communications

Classes B, CImplementation guidance
KSISVC
KSI-SVC-VRI

Validating Resource Integrity

All service classesImplementation guidance