Rev5 → 20x Transition
12 processesSide-by-side comparison of Rev5 and 20x requirements.
Rev5 requirement
20x requirement
New in 20x
KSIADSCCMFSIICPMASPVASCGSCNUCMVDRKSI
Key Security Indicators (KSI)
New in 20xRequired for all FedRAMP 20x authorizations
Authorization Data Sharing
Updated in 20xStatus: Phase 2 Pilot (effective 2025-11-18)
Collaborative Continuous Monitoring
Updated in 20xStatus: Phase 2 Pilot (effective 2025-11-18)
FedRAMP Security Inbox
Updated in 20xStatus: Phase 2 Pilot (effective 2025-11-18)
Incident Communications Procedures
New in 20xStatus: Phase 2 Pilot (effective 2025-11-18)
Minimum Assessment Scope
Updated in 20xStatus: Phase 2 Pilot (effective 2025-11-18)
Persistent Validation and Assessment
New in 20xStatus: Phase 2 Pilot (effective 2025-11-18)
Secure Configuration Guide
Updated in 20xStatus: Phase 2 Pilot (effective 2025-11-18)
Significant Change Notifications
Updated in 20xStatus: Phase 2 Pilot (effective 2025-11-18)
Using Cryptographic Modules
New in 20xStatus: Phase 2 Pilot (effective 2025-11-18)
Vulnerability Detection and Response
Updated in 20xStatus: Phase 2 Pilot (effective 2025-11-18)
Key Security Indicators
New in 20xStatus: Phase 2 Pilot (effective 2025-11-18)