MP-1 Media Protection Policy and x Procedures MP-2 Access x x x MP-6 Media Sanitization x x x MP-7 Use x x x PE Physical and Environmental Protection – PE-1 Physical and Environmental Protection x Policy and Procedures PE-2 Physical Access Authorizations x x x PE-3 Physical Access Control x x x Monitoring Physical Access x x x PE-6 PE-8 Visitor Access Records x x x PE-12 Emergency Lighting x x x PE-13 Fire Protection x x x PE-14 Temperature and Humidity Controls x x x PE-15 Damage Protection x x x PE-16 Delivery and Removal x x x PL Planning – PL-1 Security Planning Policy and x Procedures PL-2 System Security Plan x PL-4 Rules of Behavior x PS Personnel Security – PS-1 Personnel Security Policy and x Procedures PS-2 Position Risk Designation x PS-3 Personnel Screening x PS-4 Personnel Termination x Personnel Transfer x PS-5 PS-6 Access Agreements x PS-7 Personnel Security x Personnel Sanctions x PS-8 RA Risk Assessment – RA-1 Risk Assessment Policy and Procedures x RA-2 Security Categorization x RA-3 Risk Assessment x RA-5 Vulnerability Scanning x SA System and Services Acquisition – SA-1 System and Services Acquisition Policy x and Procedures SA-2 Allocation of Resources x SA-3 System Development Life Cycle x
MP-1 Media Protection Policy and Procedures x MP-2 Access x x x MP-6 Media Sanitization x x x MP-7 Use x x x PE – Physical and Environmental Protection PE-1 Physical and Environmental Protection Policy and Procedures x PE-2 Physical Access Authorizations x x x PE-3 Physical Access Control x x x PE-6 Monitoring Physical Access x x x PE-8 Visitor Access Records x x x PE-12 Emergency Lighting x x x PE-13 Fire Protection x x x PE-14 Temperature and Humidity Controls x x x PE-15 Damage Protection x x x PE-16 Delivery and Removal x x x PL – Planning PL-1 Security Planning Policy and Procedures x PL-2 System Security Plan x PL-4 Rules of Behavior x PS – Personnel Security PS-1 Personnel Security Policy and Procedures x PS-2 Position Risk Designation x PS-3 Personnel Screening x PS-4 Personnel Termination x PS-5 Personnel Transfer x PS-6 Access Agreements x PS-7 Personnel Security x PS-8 Personnel Sanctions x RA – Risk Assessment RA-1 Risk Assessment Policy and Procedures x RA-2 Security Categorization x RA-3 Risk Assessment x RA-5 Vulnerability Scanning x SA – System and Services Acquisition SA-1 System and Services Acquisition Policy and Procedures x SA-2 Allocation of Resources x SA-3 System Development Life Cycle x
APPENDIX%20B%20-%20FedRAMP%20Tailored%20LI-SaaS%20Template.docx