Generated from the official FedRAMP/rules GitHub repo. Source path: fedramp-consolidated-rules.json on main at blob 7d628b63fdd9. Consolidated Rules version: 2026.07.02.02 · upstream last_updated: 2026-07-02. Supporting narrative documentation is available from the official FedRAMP/2026-markdown repository.

FedRAMP KSI Domains

• Cybersecurity Education — CED · 1 indicator
• Change Management — CMT · 4 indicators
• Cloud Native Architecture — CNA · 8 indicators
• Identity and Access Management — IAM · 6 indicators
• Incident Response — INR · 3 indicators
• Monitoring, Logging, and Auditing — MLA · 5 indicators
• Policy and Inventory — PIY · 5 indicators
• Recovery Planning — RPL · 4 indicators
• Supply Chain Risk — SCR · 2 indicators
• Service Configuration — SVC · 8 indicators