FedRAMP Concept Of Operations - GSA

Security-related information collected through continuous monitoring is used to make recurring updates to the SSP, SAR, and POA&M. Continuous monitoring keeps the security authorization package timely and provides information about security control effectiveness. This allows agencies to make informed risk management decisions as they use cloud services. A high level illustration of the ongoing ... ................
................