Complete FedRAMP Advisory – Validate

  • Have implemented all controls and processes, especially the critical controls
  • Have prepared a complete set of all required documentation
  • Would like external validation before starting a 3PAO assessment
  • Perform a final validation of FedRAMP documentation and controls to identify and fix problems before the official 3PAO assessment begins

  • List of documentation gaps, control gaps and recommendations for priority remediations prior to assessment

Details

  • Perform a “dry run” review and validation of the FedRAMP documentation and controls
  • Perform QA validation of the final FedRAMP package
  • Perform “dry run” assessment to verify that artifacts are available and that controls are operating as intended
  • Identify documentation, artifact, control design, and control operation deficiencies
  • Determine “quick fixes” for gaps that can be remediated before the 3PAO assessment
  • Update POA&Ms as needed for identified gaps
Back