This FedRAMP Low Impact Software as a Service (LI-SaaS) Framework provides an Tailored overview of the security requirements for the <Information System Name> <Information System and describes the controls in place or planned for implementation to provide a Abbreviation> level of security appropriate for the information to be transmitted, processed, or stored by the system. Information security is vital to our critical infrastructure and its effective performance and protection is a key component of our national security program. Proper management of information technology (IT) systems is essential to ensure the required risk impact level of confidentiality, integrity, and availability of the data transmitted, processed, or stored by the system is in place and operating as intended. <Information System Abbreviation> The security safeguards implemented for the system meet <Information System Abbreviation> the policy and control requirements set in this FedRAMP LI-SaaS Framework. All Tailored systems are subject to monitoring, consistent with applicable laws, regulations, agency policies, procedures, and practices. Table 1.1. Information System Identifier, Name, and Abbreviation Unique Identifier Information System Name Information System Abbreviation <FedRAMP Application Number> <Information System Name> <Information System Abbreviation> The overall <Information sensitivity categorization is recorded in Table 2.1, System Name> Security Categorization, which follows. The completed FedRAMP FIPS 199 document is included in this document as Attachment 3 FedRAMP FIPS Security Categorization. – 2.1. System Security Categorization System Sensitivity Low Impact This section describes how the information types used by the <Information are System Name> categorized for confidentiality, integrity, and availability of sensitivity levels. The following tables identify the information types that are input, stored, processed, and/or output from<Information The selection of the information types is based System Abbreviation>. on guidance provided by the Office of Management and Budget (OMB) Federal Enterprise Architecture (EA) Program Management Office (PMO) Business Reference Model 2.0, National Institute of Standards and Technology (NIST) Federal Information Processing Standard (FIPS) Publication 199, Standards for Security Categorization of Federal Information and Information and NIST Special Publication 800-60 (NIST SP 800-60) , Systems, Guide for Mapping Types of
This FedRAMP Tailored Low Impact Software as a Service (LI-SaaS) Framework provides an overview of the security requirements for the <Information System Name> <Information System Abbreviation> and describes the controls in place or planned for implementation to provide a level of security appropriate for the information to be transmitted, processed, or stored by the system. Information security is vital to our critical infrastructure and its effective performance and protection is a key component of our national security program. Proper management of information technology (IT) systems is essential to ensure the required risk impact level of confidentiality, integrity, and availability of the data transmitted, processed, or stored by the <Information System Abbreviation> system is in place and operating as intended. The security safeguards implemented for the <Information System Abbreviation> system meet the policy and control requirements set in this FedRAMP Tailored LI-SaaS Framework. All systems are subject to monitoring, consistent with applicable laws, regulations, agency policies, procedures, and practices. Table 1.1. Information System Identifier, Name, and Abbreviation Unique Identifier Information System Name Information System Abbreviation <FedRAMP Application Number> <Information System Name> <Information System Abbreviation> The overall <Information System Name> sensitivity categorization is recorded in Table 2.1, Security Categorization, which follows. The completed FedRAMP FIPS 199 document is included in this document as Attachment 3 – FedRAMP FIPS Security Categorization. 2.1. System Security Categorization System Sensitivity Low Impact This section describes how the information types used by the <Information System Name> are categorized for confidentiality, integrity, and availability of sensitivity levels. The following tables identify the information types that are input, stored, processed, and/or output from<Information System Abbreviation>. The selection of the information types is based on guidance provided by the Office of Management and Budget (OMB) Federal Enterprise Architecture (EA) Program Management Office (PMO) Business Reference Model 2.0, National Institute of Standards and Technology (NIST) Federal Information Processing Standard (FIPS) Publication 199, Standards for Security Categorization of Federal Information and Information Systems, and NIST Special Publication 800-60 (NIST SP 800-60) , Guide for Mapping Types of