The CSP performs the following:
- Apply: CSP submits a request to FeRAMP PMO to become FeRAMP Compliant or can be sponsored by an agency to become FeRAMP Compliant
- Secure/Implement: CSP implements FedRAMP baseline security controls in accordance with their system categorization
- Document: Develop an SSP to document controls and also create CMP, CP and CP Test
- Monitor:
- Make continuous monitoring artifacts available in the FedRAMP secure repository