52. SA-5 Information System Administrator documentation exists for the Inherited Partially-Inherited Documentation information system, all system components, and all system services. The documentation describes the secure configuration, installation, and operation. 53. SC-20 Secure Name /Address The system or supporting infrastructure Inherited Partially-Inherited Resolution Service provides additional validation of the (Authoritative Source) authoritative name resolution data returned by the system in response to external name/ address resolution, such as Domain Name System Security Extensions (DNSSEC). 54. SC-21 Secure Name /Address The system or supporting infrastructure Inherited Partially-Inherited Resolution Service performs additional validation of (Recursive or Caching Resolver) name/address resolution responses received from authoritative sources, such as DNSSEC. 55. SC-22 Architecture and Provisioning Collectively, the name/address resolution Inherited Partially-Inherited for Name/ Address Resolution service is fault-tolerant and appropriately Service works within the fault-tolerant aspects of the system. 56. SC-39 Process Isolation The system maintains a separate execution Inherited Partially-Inherited domain for each executing process and customer instance. 57. SI-5 Security Alerts, Advisories, and System administrators or incident response Inherited Partially-Inherited Directives staff receive security alerts from all vendors represented within the system, as well as from DHS US CERT. Our incident response staff create and disseminate security alerts and advisories to system administrators, appropriate staff, and users of the system.
52. SA-5 Information System Documentation Administrator documentation exists for the information system, all system components, and all system services. The documentation describes the secure configuration, installation, and operation. Inherited Partially-Inherited 53. SC-20 Secure Name /Address Resolution Service (Authoritative Source) The system or supporting infrastructure provides additional validation of the authoritative name resolution data returned by the system in response to external name/ address resolution, such as Domain Name System Security Extensions (DNSSEC). Inherited Partially-Inherited 54. SC-21 Secure Name /Address Resolution Service (Recursive or Caching Resolver) The system or supporting infrastructure performs additional validation of name/address resolution responses received from authoritative sources, such as DNSSEC. Inherited Partially-Inherited 55. SC-22 Architecture and Provisioning for Name/ Address Resolution Service Collectively, the name/address resolution service is fault-tolerant and appropriately works within the fault-tolerant aspects of the system. Inherited Partially-Inherited 56. SC-39 Process Isolation The system maintains a separate execution domain for each executing process and customer instance. Inherited Partially-Inherited 57. SI-5 Security Alerts, Advisories, and Directives System administrators or incident response staff receive security alerts from all vendors represented within the system, as well as from DHS US CERT. Our incident response staff create and disseminate security alerts and advisories to system administrators, appropriate staff, and users of the system. Inherited Partially-Inherited
APPENDIX-E-FedRAMP-Tailored-LI-SaaS-Self-Attestation-Requirements.docx