Third Party Assessor
- 3PAO is responsible for the assessment.
- They perform the following:
- Create a Security Assessment Plan (SAP)
- Perform initial and periodic assessments (continuous Monitoring) of CSP security controls
- Conduct security tests and produce a Security Assessment Report and POAM
- Categorize system
- To become and accredit 3PAO, assessors must submit application materials demonstrating that they meet both technical competence in security assessment of cloud systems and management requirements for organizations performing inspections. FedRAMP has approved American Association for Laboratory Accreditation (A2LA) to accredit FedRAMP Third Party Organizations (3PAOs)
error: Content is protected !!
Login
Accessing this course requires a login. Please enter your credentials below!