- ATTACHMENT 5 All Authorization Packages must include a Rules of Behavior (RoB) attachment, which will be reviewed for quality. The RoB describes controls associated with user responsibilities and certain expectations of behavior for following security policies, standards and procedures. Security control PL-4 requires a CSP to implement rules of behavior. The Rules of Behavior Template can be found on the following FedRAMP website page: . The Template provides two example sets of rules of behavior: one for Internal Users and one for External Users. The CSP should modify each of these two sets to define the rules of behavior necessary to secure their system.
ATTACHMENT 5 - All Authorization Packages must include a Rules of Behavior (RoB) attachment, which will be reviewed for quality. The RoB describes controls associated with user responsibilities and certain expectations of behavior for following security policies, standards and procedures. Security control PL-4 requires a CSP to implement rules of behavior. The Rules of Behavior Template can be found on the following FedRAMP website page: . The Template provides two example sets of rules of behavior: one for Internal Users and one for External Users. The CSP should modify each of these two sets to define the rules of behavior necessary to secure their system.