Table 12 Standards and Guidance Identification Title Date Link Number The purpose of this document is to provide the SO, , and the AOs with a SAR for the . A security assessment has been performed on the to evaluate the system’s implementation of, and compliance with, the FedRAMP baseline security controls. The implementation of security controls is described in the SSP, and required by FedRAMP to meet FISMA compliance mandate. The FedRAMP program requires Cloud Service Providers (CSPs) to use a FedRAMP-accepted Independent Assessor (IA) Third Party Assessment Organization (3PAO) to perform independent security assessment testing and development of the SAR. Security testing for was performed by in accordance with the Security Assessment Plan (SAP), dated . This SAR applies to which is managed and operated by . The that is being reported on in this document has a unique identifier which is noted in Table 13 Information System Unique Identifier, Name and Abbreviation. Table 13 Information System Unique Identifier, Name and Abbreviation Unique Identifier Information System Name Information System Abbreviation Instruction: 3PAOs must at the minimum review all the below listed documents. If other documents or files are reviewed, they must be attached in Appendix H and referred to as necessary. Delete this instruction from your final version of this document. Documentation used by the to perform the assessment of includes the following: System Security Plan and Attachments Attachment 1: Information Security Policies and Procedures (covering all Control Families) Attachment 2: User Guide Attachment 3: E-Authentication Plan Attachment 4: Privacy Threshold Analysis/Privacy Impact Assessment Attachment 5: Rules of Behavior Attachment 6: Information System Contingency Plan and Test Results
Table 12 Standards and Guidance Identification Number Title Date Link The purpose of this document is to provide the SO, , and the AOs with a SAR for the . A security assessment has been performed on the to evaluate the system’s implementation of, and compliance with, the FedRAMP baseline security controls. The implementation of security controls is described in the SSP, and required by FedRAMP to meet FISMA compliance mandate. The FedRAMP program requires Cloud Service Providers (CSPs) to use a FedRAMP-accepted Independent Assessor (IA) Third Party Assessment Organization (3PAO) to perform independent security assessment testing and development of the SAR. Security testing for was performed by in accordance with the Security Assessment Plan (SAP), dated . This SAR applies to which is managed and operated by . The that is being reported on in this document has a unique identifier which is noted in Table 13 Information System Unique Identifier, Name and Abbreviation. Table 13 Information System Unique Identifier, Name and Abbreviation Unique Identifier Information System Name Information System Abbreviation Instruction: 3PAOs must at the minimum review all the below listed documents. If other documents or files are reviewed, they must be attached in Appendix H and referred to as necessary. Delete this instruction from your final version of this document. Documentation used by the to perform the assessment of includes the following: System Security Plan and Attachments Attachment 1: Information Security Policies and Procedures (covering all Control Families) Attachment 2: User Guide Attachment 3: E-Authentication Plan Attachment 4: Privacy Threshold Analysis/Privacy Impact Assessment Attachment 5: Rules of Behavior Attachment 6: Information System Contingency Plan and Test Results
FedRAMP-SAR-Template.docx